Enterprise Security Architect

SUMMARY:
Our growing team is looking for an experienced Enterprise Security Architect who will play a key role in shaping the security strategy, architecture, and implementation across our enterprise IT landscape.

As an Enterprise Security Architect, you will design and implement comprehensive security frameworks that protect our digital assets, intellectual property, and data, while enabling the business to innovate securely. You will work closely with senior leaders, IT, and engineering teams to ensure that security is integrated at every level of our organization.

POSITION INFO:

Key Responsibilities

• Design and Strategy: Define and drive the enterprise security strategy, architecture, and standards. Design security frameworks for cloud, hybrid, and on-premises environments that align with business objectives.
• Risk Management: Lead and conduct security risk assessments, threat modeling, and vulnerability assessments to proactively identify and mitigate potential risks. Ensure appropriate risk controls are implemented.
• Security Architecture: Develop and maintain the enterprise security architecture, ensuring it is scalable, flexible, and secure. Design and implement secure networks, systems, applications, and databases.
• Security Governance: Establish and enforce security governance, policies, and procedures in alignment with industry best practices (NIST, ISO 27001, CIS, etc.) and regulatory requirements (GDPR, HIPAA, PCI-DSS).
• Collaboration: Work closely with IT, engineering, and product teams to ensure security requirements are integrated into new systems, applications, and infrastructure from the outset.
• Incident Response: Design and oversee security incident response and disaster recovery strategies. Provide technical leadership during security incidents and help drive remediation efforts.
• Security Monitoring: Oversee the integration of security monitoring, auditing, and reporting tools to ensure continuous visibility into security posture.
• Technology Evaluation: Evaluate and recommend emerging security technologies, tools, and solutions. Lead proof-of-concept and pilot projects to integrate new technologies into the enterprise security environment.
• Compliance: Ensure that all security practices align with industry standards, regulatory requirements, and best practices. Assist in audit processes and compliance reviews.
• Training and Mentorship: Mentor and provide thought leadership to junior security professionals. Promote a security-first culture across the organization.

Skills & Qualifications

• Bachelor’s Degree in Computer Science, Information Security, or a related field. A Master’s degree or advanced certifications are a plus.
• 10+ years of experience in IT security, with at least 5 years in an architecture or strategic role.
• Proven experience designing security architectures for large, complex enterprise environments, including cloud, hybrid, and on-premises systems.
• Deep knowledge of enterprise security frameworks, methodologies, and industry standards (e.g., NIST, ISO 27001, CIS, SOC 2, GDPR, HIPAA, PCI-DSS).
• Hands-on experience with security technologies such as firewalls, IDS/IPS, SIEM, DLP, VPN, MFA, encryption, and endpoint security solutions.
• Expertise in cloud security (AWS, Azure, GCP), containerization (Docker, Kubernetes), and DevSecOps practices.
• Strong knowledge of security tools and platforms for vulnerability management, incident response, and security monitoring.
• Excellent understanding of threat intelligence, advanced persistent threats (APTs), penetration testing, and risk management techniques.
• Experience with identity and access management (IAM), role-based access control (RBAC), and privileged access management (PAM).
• Strong leadership and communication skills with the ability to influence stakeholders at all levels of the organization.
• Ability to balance security needs with business objectives, ensuring that security solutions enable rather than hinder innovation.
• Familiarity with compliance frameworks such as SOX, SOC 2, GDPR, and industry regulations specific to your sector (finance, healthcare, etc.).

Preferred Qualifications

• Certifications such as CISSP, CISM, TOGAF, SABSA, or AWS Certified Security Specialty.
• Experience with Zero Trust Architecture and Micro-Segmentation.
• Knowledge of enterprise risk management and business continuity planning.
• Background in leading or participating in security assessments and audits.
• Experience working in regulated industries (finance, healthcare, etc.) is a plus.