Associate Vice President – Platform Security

This is a fully remote position, open to applicants in Arizona.

📋 Description

• Define and take ownership of the security strategy, roadmap, and policy framework for enterprise platforms encompassing cloud, container, and AI security.

• Establish cohesive technical standards and architecture across cloud, container, and AI platforms.

• Initiate and enhance the operational model for AI Security.

• Provide guidance to senior technology, security, and business executives regarding platform security risks and emerging threats.

• Promote continuous improvement through risk-based prioritization, KPIs, executive reporting, benchmarking, and innovation.

• Oversee the strategy, architecture, and operational standards for cloud security services.

• Define and govern security measures for containers and Kubernetes across both cloud and on-premises platforms.

• Advocate for preventive guardrails, policy enforcement, infrastructure-as-code controls, and self-service remediation.

• Influence the tool portfolio for platform security and manage vendor strategies, platform health, roadmap alignment, and capability adoption.

• Establish governance, standards, gateways, guardrails, agentic security controls, model and platform protection, and mechanisms for AI detection and response.

• Define platform security policies, standards, reference architectures, and operational procedures.

• Align security controls with regulatory frameworks and industry standards.

• Provide executive reporting and governance dashboards on program health, security posture, remediation, residual risk, and decision-making.

• Create risk-based processes for managing vulnerabilities and misconfigurations.

• Collaborate with Legal, Compliance, Privacy, Third Party Risk Management (TPRM), Data Protection, and AI Governance teams.

• Build, lead, and develop teams focused on cloud, container, infrastructure, and AI security.

• Lead through both direct and matrixed influence across security, infrastructure, architecture, developer experience, and business technology teams.

• Partner with senior security and technology leaders regarding strategy, OKRs, investment decisions, and delivery commitments.

• Engage with cloud providers, security tooling vendors, AI platform providers, and industry standards organizations.

• Promote secure-by-default platform engineering, risk-based decision-making, automation, accountability, and business enablement.

⛳️ Requirements

• Over 12 years of progressive experience in information security, cybersecurity engineering, cloud security, infrastructure security, platform security, or related technology leadership positions.

• More than 5 years of senior leadership experience in building, leading, and scaling cross-functional security engineering teams within large, complex enterprise environments.

• In-depth technical expertise in cloud security architecture and operations across major cloud platforms, including cloud posture management, identity and access controls, network segmentation, encryption, logging, vulnerability management, and policy enforcement.

• Strong comprehension of container and Kubernetes security, encompassing image scanning, workload protection, runtime controls, secrets management, cluster hardening, CI/CD integration, and vulnerability remediation.

• Proven experience in defining technical security standards, reference architectures, control frameworks, and engineering guardrails for enterprise-scale platforms.

• Familiarity with AI, GenAI, or emerging technology security programs, including AI governance, AI platform security, model risk, agentic systems, prompt/response guardrails, model scanning, AI threat modeling, or AI runtime monitoring.

• Solid understanding of security posture management, vulnerability management, threat modeling, risk-based prioritization, and executive-level risk reporting.

• Demonstrated ability to influence engineering culture, platform governance, security control adoption, and strategic investment decisions across various leadership levels.

• Experience operating in highly regulated environments and applying security requirements aligned with healthcare, privacy, financial, or critical infrastructure obligations.

• Exceptional communication and presentation skills; capacity to translate complex cloud, container, infrastructure, and AI security risks into clear decisions and executive narratives.

🏝️ Benefits

• CVS Health bonus, commission or short-term incentive program.

• Equity award program.

• Medical coverage.

• Dental coverage.

• Vision coverage.

• Paid time off.

• Retirement savings options.

• Wellness programs.

• Additional resources supporting physical, emotional, and financial well-being.