Sysco LABS Sri Lanka

THE BIG PICTURE

Sysco LABS is the captive innovation arm of Sysco Corporation (NYSE: SYY), the world’s largest foodservice company. Sysco is a Fortune 500 company and the global leader in selling, marketing, and distributing food products to restaurants, healthcare, and educational facilities, lodging establishments and other customers who prepare meals away from home. Its family of products also includes equipment and supplies for the foodservice and hospitality industries. With more than 76,000 colleagues, the company operates 334 distribution facilities worldwide and serves approximately 730,000 customer locations. For fiscal year 2024 that ended July 1, 2024, the company generated sales of more than $78.8 billion.

Operating with the agility and tenacity of a tech–startup, powered by the expertise of the industry leader, Sysco LABS is perfectly poised to transform one of the world’s largest industries.

Sysco LABS’s engineering teams based out of Colombo, Sri Lanka and Austin and Houston, TX, innovate across the entire food service journey – from the enterprise grade technology that enables Sysco’s business, to the technology that revolutionizes the way that Sysco connects with restaurants and the technology that shapes the way those restaurants connect with customers.

Sysco LABS technology is present in the sourcing of food products, merchandising, storage and warehouse operations, order placement and pricing algorithms, the delivery of food and supplies to Sysco’s global network, the in-restaurant dining experience of the end-customer and much more.

THE OPPORTUNITY

We are on the lookout for a Cyber Security Architect, who will be responsible for guiding the design and implementation of secure solutions and services across our business and IT support areas – driving the successful configuration and implementation of security solutions to reduce risk to an acceptable level. The right candidate will be tasked with providing support to internal and external teams to define and develop secure architecture and solutions for projects and business solutions, conducting discovery sessions to gain the necessary background and review findings to ensure sustained compliance, remediation of control gaps, and escalation of possible critical issues to senior management.

The Cyber Security Architect will also identify areas of potential improvement for key processes and procedures and define strategies for achieving reductions in work effort and costs related to compliance efforts. Additional responsibilities include working with various business owners in implementing, executing, and monitoring IT related logical access and IT operations controls using NIST, and other IT control frameworks.

RESPONSIBILITIES

Guiding, assessing and documenting design of secure solutions and services across Business & BT areas
Defining and implementing secure operations, communications, platform and application standards
Architecting and directing implementation of technical security solution policies in alignment with business risk
Researching, evaluating, recommending, designing, testing, and implementing new security technologies
Serving as subject matter expert and central point of contact for Cyber Security
Preparing and maintaining technical user guides, SOPs, security architecture documentation and diagrams
Analyzing, Documenting, and Presenting findings and proposed solutions
Continuously communicating with project managers and owners
Participating in meetings and providing recommendations and strategies for ensuring remediation of gap and deficiencies as projects develop
Staying apprised of all projects and new controls defined by Internal Audit, and presenting new applications and process areas likely to require controls to management

REQUIREMENTS

A minimum of 5 years of work experience in Information Security
Knowledge of Network-Based Security Solutions: IPS/IDS, NG Firewalls, Behavioral Analytics, Malware Forensics, etc.
Experience with Host-Based Security Solutions: HIDS, Data Loss Prevention (DLP), Tripwire FIM & SCM
Experience with System & DB Platforms (On-Premises and Cloud): Linux, Windows, Unix, Oracle, DB/2, SQL
Knowledge of Monitoring & Analytics: Strong SIEM (Qradar) Implementation & Optimization Experience
Previous exposure to Secure Communication & System Integration Technologies & Methodologies
The ability to document work papers as evidence of control success or deficiency
Strong verbal and written communication skills
CISSP, CEH, GIAC certification preferred
Must possess a broad range of security skills and knowledge and should be capable of defining secure configuration and architecture requirements and following through from development and deployment to production

BENEFITS

US dollar-linked compensation
Performance-based annual bonus
Performance rewards and recognition
Agile Benefits - special allowances for Health, Wellness & Academic purposes
Paid birthday leave
Team engagement allowance
Comprehensive Health & Life Insurance Cover - extendable to parents and in-laws
Overseas travel opportunities and exposure to client environments 
Hybrid work arrangement