Data Security Architect (Flexible)

Shape Your World

At Alcoa, you will become an essential part of our purpose : to turn raw potential into real progress. The way we see it, every Alcoan is a work-shaper, team-shaper, idea-shaper, world-shaper.

At Alcoa, you’re an essential part of our purpose : to turn raw potential into real progress . This is an opportunity for you to bring your wealth of experience to the team and help shape the future of sustainability with world-changing innovations and low-carbon technologies.

You have the power to shape things to make them better.

About the Role :

Identify Regulatory requirements within scope of this role (Privacy, international trade, etc.) and in coordination with the GRC team, ensure compliance within this specific security domain.

Ensure security requirements are fully integrated within the DevSecOps pipelines.

In conjunction with ITAS Security, Security Operations and Applications teams ensure appropriate vulnerability management requirements are being met.

Provide timely reporting on the overall vulnerability risk picture of the applications within the scope of this role.

Provide technical support to ITAS project teams to ensure continued compliance to defined security requirements.

Advise internal management or business partners on the implementation or operation of compliance programs.

Coordinate with the Security and Risk team to ensure adequate risk management within the application and data security domain.

Provide guidance and oversight to Alcoa’s secure utilization of Data Security - at rest, in motion, in processing including interface / integration methods or technologies.

What you can bring to this role :

Bachelor’s degree with the focus in Computer Science, Business, Finance or Accounting or Engineering.

3+ years’ experience at a large public company; or equivalent combination of education and experience.

In depth understanding of security tools specific to data protection, Understanding of DevOps pipelines, In-depth understanding of API management and security, understanding of the privacy regulations relevant to regions where Alcoa operates (EU, AU, NA) understanding of Sarbanes Oxley Act.

2 years of experience in data protection processes and technologies, 5 years working within an IT Security organization and at least 2 years’ experience in secure application development.

Current or expired C.I.S.S.P. or similar ISC2 certification highly desired.

What’s on offer :

• 401(k), employer match up to 6%, additional employer retirement income contribution (no vesting period), and a nonqualified deferred compensation plans ;
• 15 days’ vacation and one flexible holiday of your choice ;
• Flexible spending accounts and generous employer contribution to the HAS;
• Paid annual volunteer hours;

Career development opportunities to pursue your passions; and

Social and diversity focused engagement opportunities.

LI-TL2

LI-Remote