- Salary
- $147k – $248k
- Location
- OFFSITE - USA - Georgia, United States of America
- Type
- Full-time
- Department
- IT
- Seniority
- Lead
- Experience
- 10+ years
- Source
- Workday
Description
-About GlobalFoundries:
GlobalFoundries is a leading full-service semiconductor foundry providing a unique combination of design, development, and fabrication services to some of the world’s most inspired technology companies. With a global manufacturing footprint spanning three continents, GlobalFoundries makes possible the technologies and systems that transform industries and give customers the power to shape their markets. For more information, visit www.gf.com.
-Summary of Role:
The Cloud & Application Security Leader is responsible for defining, driving, and operationalizing security strategy across GlobalFoundries’ cloud platforms and application ecosystem. This role oversees the protection of cloud-hosted workloads, enterprise applications, and intellectual property by establishing secure architecture, governance, and engineering practices across AWS, Azure, and other platforms.
The leader will partner closely with Cloud Engineering, Application Development, Enterprise Architecture, and Cyber Defense teams to embed security into the full technology lifecycle—from design through operations—ensuring alignment with regulatory, contractual, and operational requirements. This role is critical to enabling secure cloud adoption, protecting sensitive manufacturing and R&D data, and maintaining customer trust in a highly regulated environment.
-Essential Responsibilities:
• Evaluates, tests, monitors, and maintains information systems (IS) and cyber security policies, procedures and systems I Creates, implements and oversees identity management systems to meet specific security needs and complex compliance standards
• Ensures that IS and cyber security plans, controls, processes, standards, policies and procedures are aligned with IS standards and overall IS and cyber security
• Identifies security risks and exposures, determines the causes of security violations and suggests procedures to halt future incidents and improve security
• Develops techniques and procedures for conducting IS, cyber security and access and identity risk assessments and compliance audits, the evaluation and testing of hardware, firmware and software for possible impact on system security, and the investigation and resolution of security incidents such as intrusion, frauds, attacks or leaks
• Define and execute cloud security strategy across multi-cloud (AWS, Azure, GCP). Establish secure architecture patterns for IaaS, PaaS, and SaaS workloads.
• Partner with cloud engineering to embed preventative and detective controls across shared platforms.
• Implement and mature Cloud Security Posture Management (CSPM) for continuous monitoring and compliance validation.
• Lead secure software development practices aligned to security-by-design (SDLC integration).
• Establish and scale capabilities for SAST, SCA, and API security
-Other Responsibilities
• Serve as key partner and liaison to CIO/CISO to drive adoption of security practices and awareness throughout Globalfoundries
-Required Qualifications
- Bachelor’s or Master’s degree in Computer Science, Information Security, or related field
- 10+ years of experience in cybersecurity, with significant focus on cloud and application security
- Deep expertise in public cloud platforms (AWS, Azure, GCP) and secure architecture design
- Strong understanding of full-stack security (network, infrastructure, OS, database, and applications) [Re: Secure...ob bullets | Outlook]
- Proven experience implementing cloud security controls, IAM, and encryption standards
- Hands-on experience with CSPM, CI/CD security, and DevSecOps practices
- Experience working in regulated environments with strong compliance requirements
- Demonstrated leadership experience managing cross-functional teams and complex programs
-Preferred Qualifications
- Experience in semiconductor, manufacturing, or highly regulated industries
- Familiarity with GlobalFoundries cloud operating model and hybrid/multi-cloud environments [GF Public...Strategy | PowerPoint]
- Expertise in Zero Trust architecture and modern identity security models
- Experience with security automation, AI-driven security analytics, and advanced threat detection
- Industry certifications such as CISSP, CCSP, AWS Security Specialty, or Azure Security Engineer
- Experience integrating security with enterprise platforms (e.g., ServiceNow, SIEM, observability platforms) [DMND001206...Management | Outlook]
- Strong stakeholder management and executive communication skills
Expected Salary Range
$147,000.00 - $248,000.00The exact Salary will be determined based on qualifications, experience and location.
If you need a reasonable accommodation for any part of the employment process, please contact us by email at [email protected] and let us know the nature of your request and your contact information. Requests for accommodation will be considered on a case-by-case basis. Please note that only inquiries concerning a request for reasonable accommodation will be responded to from this email address.
An offer with GlobalFoundries is conditioned upon the successful completion of pre-employment conditions, as applicable, and subject to applicable laws and regulations.
GlobalFoundries is fully committed to equal opportunity in the workplace and believes that cultural diversity within the company enhances its business potential. GlobalFoundries goal of excellence in business necessitates the attraction and retention of highly qualified people. Artificial barriers and stereotypic biases detract from this objective and may be illegally discriminatory.
All policies and processes which pertain to employees including recruitment, selection, training, utilization, promotion, compensation, benefits, extracurricular programs, and termination are created and implemented without regard to age, ethnicity, ancestry, color, marital status, medical condition, mental or physical disability, national origin, race, religion, political and/or third-party affiliation, sex, sexual orientation, gender identity or expression, veteran status, or any other characteristic or category specified by local, state or federal law
