Director of Cyber Security Architecture, Engineering Services

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee the comprehensive design of cyber security architecture, engineering, and business architecture to guarantee adherence to cyber security policies.

• Contribute to the overarching security vision and strategy.

• Aim to enhance operational efficiencies and reliability within the Cyber Security tools ecosystem.

• Manage daily operations and execution of Cyber security architecture and engineering functions.

• Collaborate with IT professionals and business leaders to evaluate and manage cyber risk.

• Work alongside leaders throughout the business to pinpoint opportunities and risks while developing solutions.

• Refine, design, and implement a company-wide cyber security architecture and engineering framework.

• Develop cyber security patterns for application design.

• Oversee external assessment activities and present findings to senior leadership.

• Act as a subject matter expert for internal teams.

• Provide guidance on cyber risk management activities and security best practices.

• Prototype new security tools and technologies while optimizing existing ones.

• Ensure effective communication with peers in technology and business groups regarding security objectives.

• Supervise the deployment, integration, and configuration of cyber security solutions.

• Lead initiatives aimed at knowledge sharing across teams.

• Document and evaluate the performance and effectiveness of the Information Security program.

⛳️ Requirements

• Bachelor’s degree or higher in a relevant field.

• Industry certification is required, such as CISSP, CISA, CISM, or an equivalent designation.

• At least 10 years of experience in building and leading cybersecurity programs.

• A minimum of 5 years in leadership roles overseeing Security Architecture and Engineering Teams.

• Candidates must be authorized to work in the US without requiring employer sponsorship now or in the future.

• Strong foundational knowledge of Cyber Security Architectural and Engineering principles that support Cyber Defense, Compliance, Perimeter Security, Data Protection, Application Security, Operating System Security, Virtual Infrastructure, and Storage Protection.

• Familiarity with physical security.

• Experience with the adoption of Zero Trust principles.

• Strong understanding of DevSecOps practices.

• Proficient knowledge of AWS and related tools for cloud support.

• In-depth understanding of Private Cloud, Public Cloud, and/or Hybrid Cloud environments.

• Experience with Risk, Security, or Audit frameworks (e.g., COBIT, COSO, ISO 27001/2, NIST 800-53, NIST CSF, AICPA, BITS).

• Serve as a subject matter expert on InfoSec and IT Security topics with experience in technical control testing aligned with NIST 800-53, FISMA, and SOC.

• Strong analytical skills to identify, evaluate, and mitigate significant risks within an enterprise.

• Preferred experience in using and managing Risk Management tools.

• Proficient experience with Microsoft Office Suite and GRC tools.

• Experience in the secondary mortgage market or equivalent financial services is a plus.

• Ability to document and articulate risks and vulnerabilities to both business and technical stakeholders.

• Capability to influence peers and management; ability to collaborate cross-functionally and build relationships to achieve objectives.

• Excellent oral and written communication skills, with the ability to work effectively with others in a collaborative, complex, and fast-paced environment.

🏝️ Benefits

• Performance bonus.

• 401k match.

• Healthcare coverage.

• PTO.

• A broad range of additional benefits.