10601 - Senior Manager, Security Architecture & Engineering
Location: Irvine, HQ Company Overview
Hyundai AutoEver America (HAEA) is the dynamic IT powerhouse behind Hyundai Motor Corporation, a Fortune 500 global leader in the automotive industry. As a key affiliate, we provide cutting-edge IT services and support to top brands including Kia, Genesis, Hyundai Translead, Hyundai Mobis, Hyundai Capital, and Glovis.
HAEA offers a truly global and collaborative environment. Here, you will drive innovation, boost operational efficiency, and help shape the future of mobility for the Hyundai Motor Group.
At HAEA, we understand that IT is the cornerstone of today's fast-evolving digital world. By uniting all IT resources under one roof, we deliver consistent, top-quality solutions while serving as the crucial information link between Hyundai's Global Headquarters and North American operations.
If you are passionate about technology and eager to make a real impact at a world-class company, Hyundai AutoEver America is the place to grow your career. Join us and be part of the transformation that is driving the future of automotive innovation.
Website: http://www.haeaus.com
Role Overview
The Senior Manager, Security Architecture & Engineering owns the enterprise security reference architecture, secure-by-design standards, and the engineering and lifecycle management of security controls and tooling across cloud, network, endpoint, identity, data, and application environments. This leader manages a team of security architects and engineers and partners closely with Infrastructure, Cloud, Application Security, SOC/Incident Response, and Governance, Risk & Compliance (GRC) teams to design, build, and operate security solutions that protect the availability, integrity, and confidentiality of company information resources. The role also advises the organization on emerging security technologies and architectural patterns.
This position defines and maintains the multi-year security architecture roadmap and target state, aligned with control frameworks and architectural principles including Zero Trust, cloud security, identity and access management, network segmentation, and detection tooling. The Senior Manager sets technology standards for the security stack and leads team hiring, mentoring, performance development, workload prioritization, and delivery.
Key Responsibilities
• Own enterprise and solution security architecture, including threat modeling, architecture and design reviews, and reference architectures for cloud, network segmentation, identity, endpoint, data protection, and application security.
• Lead the engineering and implementation of security solutions and own the technology lifecycle and roadmap for security controls and tooling, with measurable goals for coverage, modernization, and retirement of legacy technologies.
• Translate approved policy into technical security standards, baselines, and reference architectures; chair or participate in the architecture review board; and manage exception and risk-acceptance processes for technical deviations.
• Support the development of security policies, standards, procedures, and related documentation.
• Gather and organize technical information regarding the organization’s mission, goals, needs, existing security products, and ongoing information security programs.
• Interpret regulatory and framework requirements, including NIST CSF, NIST SP 800-53, ISO 27001, CIS Controls, PCI, and CCPA, into technical control requirements and architecture decisions.
• Implement automated control enforcement and compliance-as-code, and provide technical evidence and control telemetry to GRC.
• Conduct security design assessments, architecture gap analyses, and control validation for engineered solutions, and lead remediation of identified findings.
• Review application and system development plans from an information security perspective and provide recommendations and corrective guidance.
•…