Director of Security Architecture

Director of Security Architecture at Oracle

The Oracle SaaS Security team is seeking a Director of Security Architecture to spearhead product security architecture across SaaS Services. This role involves leading a team of security experts who collaborate with product teams to develop and deploy secure and resilient SaaS Services.

As a security-minded leader, you will define the strategy and oversee a risk-based security review program. You'll leverage AI capabilities to enhance consistency and coverage of security assessments across all SaaS Services. Partnering with Engineering, Product, Security, Compliance, and SaaS Operations teams, you will establish patterns, standards, and guardrails, enabling teams to build securely and accelerate shipping.

Responsibilities

• Hire, mentor, and manage a distributed team of security architects, fostering a culture of collaboration and continuous improvement.
• Plan, prioritize, track, and deliver in-depth security reviews and assessments. Establish KPIs and report progress and risk posture to senior leadership.
• Define secure-by-design architecture standards, security patterns, and reference implementations for SaaS Services.
• Evolve security processes and integrate security architecture into the SDLC, leveraging AI and automation as appropriate.
• Engage in technical discussions, serving as a subject matter expert for security architecture and a trusted advisor to executive leadership and key stakeholders.
• Partner with Engineering, Product, Security, Compliance, and SaaS Ops teams to mitigate risk, meet regulatory obligations, and improve resilience.
• Drive incident learnings back into security design patterns and controls; ensure auditability and documentation for internal/external reviews.
• Evaluate potential business impacts from security breaches and provide strategic and tactical guidance to business decision-makers.
• Champion responsible use of AI and data handling in security tooling and processes, aligned with Oracle’s security, privacy, and compliance guidelines.
• Stay current on emerging threats and standards, translating them into actionable guidance, including but not limited to crypto, AI Security, Identity, Web security, and multi-tenant deployment.

Qualifications

• 10+ years of professional experience in security, including product security, application security, security testing/offensive security, security tools, and security architecture.
• 3+ years of leadership and people management skills.
• Experience in driving, leading, and guiding product security architecture and assurance efforts in a large-scale IaaS/PaaS/SaaS Cloud Service Provider or Fortune 500 company.
• Experience in applying AI technology to the security domain.
• Demonstrated ability to think strategically and build strategic partnerships.
• Ability to communicate information clearly and concisely in written, verbal, and high-impact presentations to product teams and leadership.
• Demonstrated history of attracting and retaining high-performance employees.
• Thorough understanding of common security assessment processes and how they fit into the software development lifecycle.

Key skills/competency

• Security Architecture
• SaaS Security
• Product Security
• AI Security
• Cloud Security
• Risk Management
• SDLC Integration
• Security Leadership
• Compliance Management
• Incident Response