Senior Cybersecurity Strategist

Job Opportunity:

The Principal Cybersecurity Architect will lead our cybersecurity architecture and engineering strategies to maintain a strong security posture.

This role involves overseeing the Cybersecurity Engineering, Architecture, Exposure/Vulnerability Management, and Identity Security functions, focused on delivering security solutions that drive enterprise cyber resilience and secure business growth.

Key Responsibilities:

• Develop and implement a strategy for modernizing our security stack, ensuring architecture stays current with evolving technologies and threats.
• Oversee/Manage: Spearhead strategic cybersecurity projects across Network Security, Endpoint Security, Cloud Security, and Identity Security, leveraging advanced technologies like SentinelOne, Tenable, Zscaler, SailPoint, and Orca.
• Drive security solutioning, engineering, and project implementations to mitigate risk and enhance security resilience.
• Define and maintain security standards, handling exceptions across various technology types and ensuring consistent risk mitigation.
• Conduct Proofs of Concept (POCs) to evaluate and implement emerging security solutions.

Security Architecture & Engineering:

• Architect and document robust security solutions for critical infrastructure, cloud environments, and customer-facing platforms.
• Oversee the deployment and configuration of security solutions including next-generation firewalls, EDR/XDR, disk encryption, data security posture management & DLP solutions, and advanced cloud security management solutions (AWS, GCP, Azure, OCI).
• Maintain a comprehensive Security Architecture Review program for new and existing technologies, ensuring alignment with industry best practices and regulatory standards.

Vulnerability & Exposure Management:

• Direct/Oversee the Vulnerability Assessment and Penetration Testing (VAPT) program, ensuring continuous assessment and mitigation of security vulnerabilities and exposures across the organization's technology estate.
• Lead a comprehensive Security Vulnerability Management Program, overseeing Tenable project deployments, and operational processes for managing vulnerabilities in workstations, servers, and applications.
• Execute security assessments for 400+ applications, ensuring secure SDLC practices across the development lifecycle.
• Manage network security, cloud security, and external attack surface vulnerability assessments using tools like Orca, Cycognito, BitSight and others.
• Conduct internal and external penetration tests, simulating attacks to proactively identify and address security gaps.

Identity Governance & Administration:

• Direct the Identity & Access Management program, enforcing policies, controls and governance that protects access to critical systems and data.
• Oversee the deployment and management of the SailPoint Identity Governance solution, ensuring access is governed based on roles, levels, and lines of business.
• Drive MFA implementation across the organization, along with secure Active Directory configuration and Privileged Access Management (PAM) for high-value admin accounts.

Team & Talent Management:

• Build, lead, and develop high-performing cybersecurity engineering and architecture teams, fostering a culture of excellence and innovation.
• Act as a mentor and advocate for team members' growth, focusing on upskilling talent to address evolving security challenges.

Cross-Functional Collaboration:

• Lead cross-functional collaboration with IT, Risk, Compliance, and other stakeholders to embed cybersecurity best practices across the organization and achieve unified risk management goals.
• Partner with technology, business and compliance teams to ensure cybersecurity solutions support strategic objectives and regulatory requirements.
• Lead regular security reviews, providing updates to executive leadership and advocating for necessary investments in cybersecurity resources and technologies.

---