Data Security Architect (Flexible)

Shape Your World

At Alcoa, you will become an essential part of our purpose: to turn raw potential into real progress.

The way we see it, every Alcoan is a work-shaper, team-shaper, idea-shaper, world-shaper.

At Alcoa, you’re an essential part of our purpose: to turn raw potential into real progress.

This is an opportunity for you to bring your wealth of experience to the team and help shape the future of sustainability with world-changing innovations and low-carbon technologies.

You have the power to shape things to make them better.

About the Role:


* Identify Regulatory requirements within scope of this role (Privacy, international trade, etc.) and in coordination with the GRC team, ensure compliance within this specific security domain.


* Ensure security requirements are fully integrated within the DevSecOps pipelines.


* In conjunction with ITAS Security, Security Operations and Applications teams ensure appropriate vulnerability management requirements are being met.


* Provide timely reporting on the overall vulnerability risk picture of the applications within the scope of this role.


* Provide technical support to ITAS project teams to ensure continued compliance to defined security requirements.


* Advise internal management or business partners on the implementation or operation of compliance programs.


* Coordinate with the Security and Risk team to ensure adequate risk management within the application and data security domain.


* Provide guidance and oversight to Alcoa’s secure utilization of Data Security - at rest, in motion, in processing including interface / integration methods or technologies.

What you can bring to this role:


* Bachelor’s degree with the focus in Computer Science, Business, Finance or Accounting or Engineering.


* 3+ years’ experience at a large public company; or equivalent combination of education and experience.


* In depth understanding of security tools specific to data protection, Understanding of DevOps pipelines, In-depth understanding of API management and security, understanding of the privacy regulations relevant to regions where Alcoa operates (EU, AU, NA) understanding of Sarbanes Oxley Act.


* 2 years of experience in data protection processes and technologies, 5 years working within an IT Security organization and at least 2 years’ experience in secure application development.


* Current or expired C.I.S.S.P.

or similar ISC2 certification highly desired.

What’s on offer:


* 401(k), employer match up to 6%, additional employer retirement income contribution (no vesting period), and a nonqualified deferred compensation plans​;


* 10 days’ vacation and one flexible holiday of your choice​;


* Flexible spending accounts and generous employer contribution to the HAS; 


* Paid annual volunteer hours; 



* Career development opportunities to pursue your passions; and


* Social and diversity focus...