Enterprise Information Management – Information Protection Archi

Purpose:
Job ID: 53990

Department Description: The Enterprise Information Management organization has launched a major initiative to replace eighteen regional data warehouses (and associated data marts) with a single Enterprise Data Warehouse solution. The outcome of the project will be efficient tools and processes to manage and access information. The Enterprise Data Warehouse project will take several years.

As Motorola moves towards a more collaborative environment, several risks become greater:

The information that will be summarized to create value may itself be sensitive (e.g. personally identifiable information. Strict controls are needed to comply with privacy principles and regulations.
When information is summarized (“mined”) the aggregated information has great value and must be protected accordingly. Summarization has the benefit of masking personally identifiable information.
When large amounts of information are available to a large number of people, there is greater ability for someone to correlate non-sensitive information and infer sensitive information. Information must be classified, and access controlled, with this in mind.

The information sourced to and housed by the Enterprise Data Warehouse must be carefully managed in order to ensure its confidentiality, integrity and availability. Increasing cyber threats, emerging technical solutions and new regulations for financial and private information demand focused attention on the information protection aspects of the systems and operational processes.

Responsibilities/Expectations: The Enterprise Information Management Information Protection Architect will act as the focal point for all information protection/privacy issues within the Enterprise Information Management (EIM) organization, and ensure alignment with enterprise-level information protection strategies and architecture. The Protection Architect will report “dotted line” to the, Director of EIM and “solid line” to the MIPS Director of Information Protection Architecture. The Protection Architect will be supported by MIPS regional, technical and governance staff who will provide operational, design, and policy assistance as needed.

Responsibilities include:

Lead EIM-related security and privacy initiatives and roadmaps.
Establish information protection roles, responsibilities and practices for regional EIM staff.
Develop policies, standards and practices to protect and monitor access to the Enterprise Data Warehouse and associated Data Marts and information.
Be an internal technical information protection consultant for the EIM Design, Build and Run teams.
Ensure that security and privacy are considered and reviewed during the project life cycle.
Document the voice of the customer (information owner) and stay up-to-date on industry information protection and regulatory trends and requirements
Perform threat assessments and identify architectures and controls to substantially mitigate associated risks
Advise on best practices for secure application development.
Define mechanisms to detect misuse
Ensure the use of the External Connections Process for all EIM needs to communicate outside of the Motorola network and provide the feasibility document as well as review of the final risk assessment.
Participate in MIPS development and communication of information protection policies, standards and practices. Communicate MIPS roadmaps and initiatives to EIM as needed.
Represent the EIM organization in the analysis of emerging information information protection technologies and in relevant programs such as Sarbanes-Oxley, Data Protection & Privacy, and Records Retention.^^

Knowledge Skills: Experience and knowledge of information protection principles such as identity management, authentication, authorization, encryption, vulnerability assessment and remediation, firewall concepts, audit trails/logs and best practices for administering data commingling.
Knowledge of Motorola information protection policies and standards and practices including records retention, privacy, and protection of intellectual property.
Knowledge of current privacy, financial, import/export and other regulations relevant to protection of information in the countries where Motorola does business.
Knowledge of criteria for data access level qualifying an individual as an "insider" for purposes of government securities legislation or regulations
Experience with the data warehouse, data mart, document management and related technologies/ systems and the business processes they support.
Excellent communication and persuasive skills: oral, written, presentations
Awareness of physical safeguards and contract language protection for intellectual property.
Must be able to work across functions and different levels of the organization to achieve results and develop supportive relationships for EIM and MIPS goals and initiatives.
Must combine the ability and desire to execute high-quality hands on work together with project management in a complex environment.
Must be capable of thought leadership.
Experience with global teams would be a bonus.
Government security clearance may be required.
REQUIREMENTS
Required Qualifications:
Experience Requirements:
(See Description)

Travel Percentage: 25%