Cyber Security Architect

Job description

Position Summary

The Cyber Security Architect provides strategic leadership for the design, implementation, and governance of the organization's cybersecurity architecture. This role develops secure, scalable solutions that protect enterprise systems, applications, cloud environments, data, and identities while enabling business growth and technology innovation.

Key Responsibilities

Define and maintain enterprise cybersecurity architecture standards, roadmaps, security patterns, and reference architectures. Lead security architecture reviews for cloud, infrastructure, application, AI, SaaS, and business transformation initiatives. Design and implement security controls across cloud platforms, network architecture, identity and access management, data protection, endpoint security, and third-party integrations.

Partner with engineering, development, infrastructure, and business teams to embed secure-by-design and security-by-default principles throughout the technology lifecycle. Conduct threat modeling, architecture risk assessments, and security reviews to identify vulnerabilities and recommend mitigation strategies. Provide cybersecurity leadership for Zero Trust initiatives, identity governance, privileged access management, authentication, authorization, and access control frameworks.

Establish security requirements for AI and emerging technologies, including governance, data protection, model security, and responsible AI adoption. Develop security reference architectures for enterprise platforms, cloud services, customer-facing applications, and operational technologies. Ensure alignment with regulatory, compliance, and industry frameworks, including PCI DSS, NIST, CIS Controls, SOX, and privacy requirements.

Evaluate emerging threats, attack techniques, and cybersecurity technologies to enhance the organization's security posture. Collaborate with Security Operations, Incident Response, Vulnerability Management, and Engineering teams to improve detection, response, and resilience capabilities. Serve as a trusted advisor to technology and business leaders on cybersecurity risks, architecture decisions, and strategic investments.

Qualifications

5+ years of experience in cybersecurity, security engineering, cloud security, infrastructure, or enterprise architecture. Strong expertise in cloud security, application security, network security, identity and access management, and security architecture. Experience with Identity Access, Cloud Infrastructure, SIEM, EDR/XDR, and DevSecOps technologies. Strong understanding of Zero Trust, threat modeling, security frameworks, regulatory compliance, and risk management.

Excellent communication and leadership skills with the ability to influence technical teams and executive stakeholders. Measurable Security Outcomes Reduce critical and high-risk architectural security findings by 30-50% annually through proactive security design reviews and threat modeling. Increase adoption of secure-by-design standards across new technology initiatives to 95% or greater. Reduce security exceptions and risk acceptance requests through standardized security reference architectures.

Improve cloud security compliance and posture scores through implementation of enterprise cloud security guardrails. Accelerate secure project delivery by providing approved architecture patterns and reusable security designs. Reduce identity-related security risk through Zero Trust architecture, privileged access controls, and modern authentication strategies. Improve compliance readiness and audit outcomes by embedding security controls within enterprise architectures.

Strengthen cyber resilience through architecture decisions that improve detection coverage, containment capabilities, and recovery readiness. Enable secure adoption of AI technologies through governance frameworks, risk assessments, and security controls for AI platforms and data usage. Business Impact Adds strategic architecture expertise for AI, cloud, identity, and secure-by-design initiatives. Drives enterprise-wide cybersecurity maturity and long-term security strategy.

Reduces organizational risk by integrating security into technology decisions from inception through deployment. Enables secure digital transformation while improving compliance, scalability, operational efficiency, and cyber resilience.