Principal Security Architect – Lilly China

At Lilly, the work is demanding because patients are waiting. We unite caring with discovery to help make life better for people around the world, knowing that every decision, every detail, and every day matters. Headquartered in Indianapolis, Indiana, our over 50,000 employees around the globe take on complex challenges to discover and deliver life-changing medicines, strengthen how health is understood and managed, and support the communities we serve. This is hard, urgent, selfless work—but it’s work worth doing. If you’re driven by purpose and ready to bring your best to work that truly matters for patients, we invite you to join us.

As Principal Security Architect for Lilly China on the Security Architecture & Engineering team, you will be the senior technical authority for security in the region. You will lead security reviews, drive improvements through threat modeling and risk assessment, and develop reference architectures, design patterns, and security guidance—with a focus on cloud (such as Alibaba Cloud and AWS) and secure application development. You will hold engineering and business partners accountable to Lilly's global security standards while adapting them to China's regulatory landscape, ensuring technology is deployed securely and in alignment with Information Security and enterprise strategy. You will also provide technical direction and mentorship to security engineers in the region, including overseeing their threat-modeling work. How You'll Succeed Technical authority & accountability:  You will be senior enough to hold people accountable and technical enough to back it up—able to get into the code and the cloud architecture, identify why a proposed solution is unsafe, and clearly articulate what 'good' looks like. You will be trusted to say no to designs that violate security best practices and to guide teams to secure alternatives. Leadership & communication:  You will collaborate with local Lilly China teams and remote global partners, playing a pivotal role in defining, designing, and executing security strategy for the region. Excellent communication, influence, and the ability to build trust across cultures and functions are essential. Cloud & application security depth:  You will craft and help implement security solutions across Alibaba Cloud and AWS, grounded in a strong understanding of secure application development and the SSDLC—so security is built in early rather than bolted on. Regulatory fluency:  You will operate fluently within China's data and cybersecurity regulatory environment (including PIPL, the Cybersecurity Law, the Data Security Law, and MLPS/data-localization requirements) and translate those obligations into practical, secure architecture. Agility & problem-solving:  You will adapt quickly to a changing threat landscape, move at the pace of the adversary, and identify and address threats and opportunities to deliver robust security solutions in a timely manner. Balancing security and operational needs:  You will balance stringent security requirements with operational realities, maintaining Lilly's security posture while showing empathy for the engineering teams' constraints and needs. Key Responsibilities ·       Serve as the senior technical reviewer and decision-maker for security architecture across Lilly China, holding engineering and business partners accountable to enterprise security standards. ·       Conduct security consulting engagements across Lilly China, focusing on improvements in threat modeling and risk assessment. ·       Develop and maintain technical specifications, design patterns, standards-as-code, and security guidance—with particular emphasis on cloud (Alibaba Cloud, AWS) and secure application development. ·       Perform threat analysis and modeling to enable business and technical partners to deliver secure solutions integrated with the secure development and operations