Vice President, Cloud & SaaS Security

The Vice President of Cloud & SaaS Security leads enterprise-wide cloud and SaaS security strategy, governance, and architecture to ensure regulatory compliance, data protection, and risk management across all environments. This role drives the design and operation of cloud-native security platforms, embeds “security by design” into modern architectures, and advances automation for continuous compliance. As a senior leader, the VP influences executive decisions, fosters cross-functional collaboration, and develops high-performing global teams to enable secure innovation at scale.

1.Cloud Security Compliance & Governance

• Lead the cloud security governance program ensuring alignment with regulatory, compliance, and risk management standards.
• Establish and drive cloud security policies, standards, and controls across all cloud environments.
• Partner with broader security domain teams to ensure requirements are met across security disciplines and tracked to closure for each primary cloud initiative
• Develop transparent reporting and metrics to inform executive decision-making and board-level visibility into cloud risk posture.

2. Cloud Security Architecture

• Define and oversee enterprise-wide cloud security architecture and reference models across public, private, and hybrid environments.
• Guide secure design principles for new technologies, ensuring resilient and scalable architectures that balance innovation with control.
• Collaborate closely with enterprise architecture, infrastructure, and application teams to embed security by design.
• Provide strategic direction for secure adoption of modern architectures

3. Cloud Security Engineering

• Lead the build and operation of cloud-native security platforms, tools, and automation that enable secure innovation at scale.
• Partner with DevOps and platform teams to enable “security as code” and integrate advanced automation for continuous compliance.
• Mentor technical leaders to strengthen engineering excellence and operational maturity across teams.

4. SaaS Security

• Own the enterprise SaaS security strategy, ensuring robust data protection, access control, and compliance across all SaaS applications.
• Establish a unified approach to SaaS risk management, integrating security reviews, vendor assessments, and ongoing monitoring.
• Drive automation and innovation in SaaS discovery, configuration management, and data governance.

Leadership & Behavioral Strengths

• Cross-Functional Leadership: Inspire and align teams across Cloud, Engineering, Risk, and Business Technology to drive a unified cloud security vision.
• Strategic Prioritization: Demonstrate strong program and platform management, balancing near-term deliverables with long-term enterprise outcomes.
• Relationship Management: Build deep partnerships across internal technology, business, and external cloud providers to influence and shape security outcomes.
• Collaboration & Inclusion: Foster a culture of trust, transparency, and shared accountability; bring others along by enabling, not obstructing.
• Influence Without Authority: Effectively communicate complex security concepts to executive and non-technical audiences to drive informed decisions.
• Talent Development: Champion the growth and empowerment of diverse teams through coaching, recognition, and opportunities for innovation.

• Education:
  • Bachelor’s degree in Computer Science, Information Security, Engineering, or a related technical field.
• Experience:
  • 15+ years of progressive experience in technology, including cloud security architecture, governance, and engineering.
  • 5+ years in a senior leadership or executive role, leading large, cross-functional security or technology teams.
  • Proven experience with major cloud platforms (AWS, Azure, GCP) and SaaS security management at enterprise scale.
• Technical Expertise:
  • Deep knowledge of cloud security frameworks (CIS, NIST, ISO 27017/18, CSA).
  • Strong understanding of DevSecOps, security automation, identity and access management, compliance, and data protection in cloud and SaaS environments.
  • Hands-on familiarity with cloud-native security tools and security as code practices.
• Leadership & Communication:
  • Demonstrated ability to influence executive stakeholders and align security with business strategy.
  • Skilled in governance, risk management, and creating board-level reporting on cloud risk posture.
  • Proven track record in mentoring senior technical leaders and fostering a culture of collaboration and inclusion.
• Certifications (preferred but not strictly required):
  • CISSP, CCSP, CISM, or cloud provider certifications (e.g., AWS Certified Security - Specialty, Azure Security Engineer Associate).

Employment eligibility to work with American Express in the U.S is required as the company will not pursue visa sponsorship for these positions