Overview
In this role, you will design and drive the organization’s security architecture and strategy to protect critical systems and information from cyber threats. You will work with cross-functional teams to assess risks, identify threats, and implement end-to-end security across platforms, data, and APIs. You will support audits, governance, and incident response, while guiding client proposals and shaping security solutions that align with business goals. This is a chance to lead modern security programs in a transformation-focused, customer-centric environment.
Responsibilities
- Design and develop enterprise cyber security strategy and architecture
- Conduct risk analyses and evaluate business strategies for security requirements
- Identify and communicate current and emerging threats; design mitigating architecture elements
- Recommend changes to gaps in architectures; ensure end-to-end security (layered security, zoning, API, endpoint, data security, compliance)
- Provide security assessments against NIST, SANS, CIS; support deployment and administration of security technologies
- Apply ITIL-like processes (incident, change, configuration, problem management) and assist in disaster recovery planning
- Develop and manage to-be-solution portfolio; create client-specific RFPs; provide technical leadership for custom solutions
- Articulate target architectures and investment roadmaps; evaluate integration with broader tech ecosystem
- Track industry trends to plan current and future IT needs
- Coordinate with stakeholders, maintain risk registers, and assist audits and security awareness training
- Support proposals and sales with timely, high-quality security outcomes
- Deliver security breach solutioning and relevant customer/stakeholder support as measured by CSAT and proposal quality
Key requirements
- Security strategy and architecture experience
- Risk assessment and threat modeling skills
- Experience with security frameworks (NIST, SANS, CIS)
- ITIL or process-oriented security management knowledge
- Disaster recovery planning and incident management exposure
- RFP development and technical leadership in security projects
- Ability to communicate with stakeholders and support audits
- Familiarity with secure design across API, data, endpoints, and integrations
- Security awareness training delivery experience
- Client-focused and cross-functional collaboration skills
- Collaborative mindset
- Strong communication
- Stakeholder management
- Security architecture design
- Security risk assessment
- NIST/SANS/CIS frameworks
…
