12 days ago
Responsibilities
- Drive the modern-workplace security roadmap, standards, control strategy, secure configuration baselines, reporting measures, and delivery priorities.
- Design and guide implementation of security capabilities for email, collaboration, productivity, identity, endpoint, enterprise content, and data-protection environments.
- Define security requirements for data protection, access governance, external collaboration, and AI-enabled productivity in partnership with platform, privacy, and security teams.
- Improve security tool integrations and workflows through automation, scripting, APIs, repeatable processes, and control validation.
- Support security telemetry, detection use cases, monitoring, investigation, incident response, containment, remediation, and continuous improvement.
- Evaluate security capabilities, tooling, emerging technologies, and strategic investments against coverage, integration, effort, user impact, and cost.
- Lead complex security engineering initiatives, coordinate project schedules and risks, report progress, and align cross-functional stakeholders.
- Mentor and develop security professionals and advise cybersecurity teams, IT platform teams, business stakeholders, and leadership.
- Ensure applicable SOX, PCI, TISAX, and other regulatory requirements are addressed.
Requirements
- Bachelor’s degree in Computer Science, Information Technology, Management Information Systems, Business, or another relevant field and at least 5 years of relevant experience.
- Experience leading complex security engineering initiatives and mentoring team members on security operations and automation best practices.
- Experience designing, implementing, and operationalizing security controls for enterprise collaboration, productivity, identity, endpoint, and data-protection environments.
- Experience with enterprise email, collaboration, and productivity-platform threat protection capabilities.
- Experience with information protection, data loss prevention, retention, compliance, or related data-governance capabilities.
- Working knowledge of risk-based access, application governance, identity security, and lifecycle controls.
- Strong understanding of modern-workplace threats and security telemetry for monitoring, detection, investigation, and response.
- Experience partnering with security operations teams on detection engineering, incident response, and continuous improvement.
- Experience using automation or scripting to support security operations, control validation, and process efficiency.
- Strong understanding of networking, storage, databases, and web-based services.
- Strong communication, documentation, collaboration, prioritization, problem-solving, and stakeholder-management skills.
- Preferred qualifications include CISSP, CCSP, SC-100, SC-200, SC-300, or SC-400 certifications; experience securing Microsoft Copilot or comparable enterprise AI deployments; and experience with Defender for Cloud Apps, DSPM for AI, or comparable CASB/data-security tooling.
Benefits
- The position is full-time and located at Garmin’s U.S. headquarters in the Greater Kansas City area.
- The position is eligible for Garmin’s benefit program.
Categories
About Garmin
Garmin designs and sells GPS-enabled electronics and software for consumers and specialized markets, including wearables, automotive, marine, outdoor, and aviation. Its portfolio spans smartwatches and cycling computers to chartplotters and certified avionics, with revenue from device sales plus maps, apps, and subscription services. Founded in 1989 and headquartered in Olathe, Kansas, Garmin is a public company traded on NASDAQ (GRMN) with global manufacturing and R&D sites.