AVP, Security Tools Engineering

Title/Role - AVP, Security Tools Engineering (L11)

Company Overview:

Synchrony (NYSE: SYF) is a leading consumer financing company that has been at the heart of American commerce and opportunity for nearly a century. Synchrony delivers credit and banking products that empower tens of millions of consumers to improve their financial lives and access what matters most. Leveraging innovative solutions that are shaping the future of retail commerce, Synchrony supports the growth and success of some of the nation’s most respected brands, alongside hundreds of thousands of small and midsize businesses, including health and wellness providers. Committed to excellence in service and culture, Synchrony is proud to be named as #3 as a Great Place to Work® in India and is honored to be ranked the #1 Best Company to Work For® in the U.S. by Fortune magazine and Great Place to Work®. For more information, visit www.synchrony.com.

Organizational Overview:This role belongs to the Endpoint Security Engineering organization within the Information Security function.

Role Summary/Purpose: This role will be part of an enterprise-wide information security operations team responsible for the Synchrony Financial (SYF) Endpoint Security operations. The ideal candidate will design, implement, and maintain endpoint security solutions while monitoring, analyzing, and responding to security incidents. The candidate will provide Level 3-4 support while setting priorities and managing day-to-day operations across an enterprise team.

Key Responsibilities:

• Administration of security tool’s infrastructure and support enterprise information security operations
• Develop and implement security policies and procedure to ensure data security and compliance in line with financial industry/sector standards
• Working experience in various encryption tools and technologies
• Work with vendors of security tools for support and enhancements
• Lead the design, implementation, and support of security tool enhancements
• Lead the definition/implementation of POCs (Proof of Concept) of security tools
• Manage enterprise-wide security tool monitoring mechanisms
• Prepare audit and compliance evidence/reports, lead, recommend and support solutions for requirements (i.e., GLBA, PCI, SB1386, SOX)
• Ensure expectations are met and ensure high customer satisfaction levels through established metrics against SLAs (Service Level Agreements)
• Benchmark and implement encryption/security best practices to mitigate potential threats to Synchrony's ecosystem, digital infrastructure, and operations
• Support the design and implementation of procedures and controls necessary to ensure and protect the safety and security of information systems assets, including prevention of intentional or inadvertent access, modification, disclosure, or destruction
• Understand business objectives, priorities, drivers, and technology focus areas
• As needed, act as a member of rapid response security operations/project support team, working under demanding deadlines, operating as team member as well as independently to resolve complex problems
• Perform other duties and/or special projects as assigned

Required Skills/Knowledge:

• Hands-on experience with endpoint protection platforms like Endpoint encryption, File Scanning, Insider Risk Platforms, etc
• Expertise in deploying security solutions
• Proficiency in configuration and managing endpoint security tools
• Strong Ability to diagnose and resolve complex endpoint security issues
• Experience with change and incident management methodologies
• Experience working hybrid and multi-cloud (IaaS/PaaS/SaaS) environments
• Competency in using scripting languages such as PowerShell, Python or Bash for automating security tasks and developing custom tools
• Effective in documenting processes, reporting incidents, and collaborating with technical and non-technical teams
• Demonstrated experience coordinating and supporting complex enterprise projects, including endpoint security tools deployment, enhancements, integrations, and upgrades

Desired Skills/Knowledge:

• Knowledge of industry regulations like PCI-DSS, HIPPA, GDPR, and how they apply to endpoint security
• Related information security certifications: CompTIA, ISACA, ISC2
• Strong analytical skills to perform problem solving, research opportunities / solutions

Eligibility Criteria:

• A total of 5+ years of Information Security experience with a minimum of 3 years of operational experience implementing, and managing/supporting endpoint security tool platforms
• 4+ years of technical expertise in management of enterprise security tools
• 3+ years of hands-on experience in endpoint encryption technologies
• 3+ years’ experience with Windows, Linux, & Mac Operating systems

Work Timings:4:00 pm to01:00 am IST

This role qualifies for Enhanced Flexibility and Choice offered in Synchrony India and will require the incumbent to be available between 06:00 AM Eastern Time – 11:30 AM Eastern Time (timings are anchored to US Eastern hours and will adjust twice a year locally). This window is for meetings with India and US teams. The remaining hours will be flexible for the employee to choose. Exceptions may apply periodically due to business needs. Please discuss this with the hiring manager for more details.)

For Internal Applicants:

• Understand the criteria or mandatory skills required for the role, before applying
• Inform your manager and HRM before applying for any role on Workday
• Ensure that your professional profile is updated (fields such as education, prior experience, other skills) and it is mandatory to upload your updated resume (Word or PDF format)
• Must not be any corrective action plan (First Formal/Final Formal, LPP)
• L4 to L7 Employees who have completed 12 months in the organization and 12 months in current role and level are only eligible.
• L9+ Employees who have completed 18 months in the organization and 12 months in current role and level are only eligible.
• L09+ Employees can apply

Grade/Level: 11

Job Family Group: