Cloud Security Architect

at  thyssenkrupp Components Technology Hungary Kft

Company
thyssenkrupp is an international industrial and technology company employing around 100,000 people. Across 48 countries it generated sales of 38 billion in fiscal 2022/2023. Backed by extensive technological know-how, the businesses develop cost-effective and resource-friendly solutions to the challenges of the future, mainly in the fields of climate protection, the energy transition, digital transformation in the industry and mobility of the future. Under the thyssenkrupp umbrella brand the company creates long-term value with innovative products, technologies and services and contributes to a better life for future generations.
In the Hungarian development center with our engineering team of 1000 we are present as an innovative and significant partner in one of the fastest growing and most exciting segment of the automotive industry, in the field of electromechanical steering systems. With outstanding quality and high-tech developments we meet the needs of renowned car manufacturers and our developments can be found in 25 % of the manufactured cars all over the world. Our engineers work on new challenges that can change the future of automotive.

• Design state of the art security architecture frameworks on the principle of internal, external and customer requirements and based on a risk based approach to create end-to-end security.
• Ensure the security of cloud-based data and applications against unauthorized access, theft and other threats by creating secure design patterns and libraries for cloud applications, support in the implementation and comply with the security strategy.
• Supporting the Cloud Center team in Eschen (security aspects, not integration - but design cloud which will be provided in Eschen cloud team) & other IT teams on the cloud-based solution as an expert in secure cloud architecture and solutions, supporting the business to development and implement secure solutions with business value
• Provide the comments for internal stakeholders
• Identification and assessment of information security risks within (hybrid) cloud solutions Definition of the applicable security level
• Definition of security controls for handling the measures on the basis of internal, external and customer standards
• Development of cloud security standards, policies and procedures in anticipation of new cloud solutions and threats
• Creation of technical concepts for the practical implementation of the defined controls
• Advising IT on the implementation of the controls
• Regular review of the effectiveness of the implemented controls and security release
• Support of the internal audit for regular testing of cloud security
• Regular reporting to the Cyber Security Manager