> Markdown version of [/jobs/ext/1316302-principal-cybersecurity-strategy-governance-architect](https://www.wearedevelopers.com/jobs/ext/1316302-principal-cybersecurity-strategy-governance-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Principal Cybersecurity Strategy & Governance Architect

- **Company:** AllSTEM Connections
- **Location:** Ontario, CA, United States
- **Experience:** Expert
- **Contract:** Temporary contract
- **Skills:** Artificial Intelligence, Cyber Security, Information Systems, Information Leak Prevention, Information Security Management, Information Technology, Operational Systems, Multiplatform, Service Stack
- **Published:** July 17, 2026
- **Apply:** https://www.dice.com/job-detail/0c600e85-d1d5-4377-b29d-e30a06c2514d

## About the Role

Education: B.S. degree in Computer Science, Information Systems, or related field.
Experience Baseline: Minimum of eight (8) years of combined experience in IT, critical infrastructure, intelligence, or cybersecurity.
Certification: Industry-recognized certification required (e.g., CISSP, CISM, CRISC, or CISA).
Depth of Knowledge: Expert-level understanding of information security management, risk assessment, and global regulatory/compliance frameworks.

Preferred Attributes
Master's degree in Computer Science or a related technical discipline.
Experience navigating the complexities of large, highly regulated corporate environments.
Proven ability to translate complex cybersecurity metrics into actionable business intelligence for non-technical stakeholders.

## Description

We are seeking a Principal Cybersecurity Strategy & Governance Architect to serve as the strategic bridge between our technical security operations and our corporate regulatory/business objectives. You will lead large-scale enterprise security programs, shape our multi-year technology roadmaps, and oversee the aggregated risk posture of our entire organization.
This is a "Principal-level" role for a leader who can operate comfortably in the boardroom and the server room. You will be at the forefront of emerging technology, specifically defining the governance, risk, and structural integrity of our AI/ML initiatives while ensuring our mission-critical operational systems remain resilient against sophisticated threats. If you are a seasoned strategist who enjoys influencing policy, mentoring technical peers, and driving change, this is your next challenge., Strategy, Governance & Regulatory Liaison
Executive Liaison: Serve as the primary security point of contact for regulatory agencies and internal steering committees.
Roadmap Leadership: Lead the development of enterprise-wide security roadmaps. Ensure our operating plans and budget allocations are directly mapped to our highest-priority business risks.
Risk Portfolio Management: Maintain a "living" risk portfolio that aggregates the security posture across diverse business units, providing clear visibility to executive leadership.

Emerging Tech & AI Security
AI/ML Governance: Lead the evaluation of AI models for adversarial risk, algorithmic bias, and data leakage. Establish "harm taxonomies" and usage policies to prevent misuse, ensuring all deployments adhere to frameworks like the NIST AI Risk Management Framework.
Operational Technology (OT) Security: Conduct consequence-based risk assessments on mission-critical industrial/operational systems. Develop and implement security policies that ensure the integrity of automated, high-stakes physical infrastructure.

Technical Leadership
Policy & Standardization: Master the application of security frameworks (NIST, ISO) and regulatory requirements. Act as the final authority on security architecture, ensuring consistent compliance across diverse technology stacks (Multi-platform/OS environments).
Behavioral Change: Act as an enterprise "change agent." Influence leaders and peers to adopt secure-by-design behaviors that support long-term business resilience.


## Related Videos

- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Introducing a Digital Service Catalog for speed and scale](https://www.wearedevelopers.com/videos/763-introducing-a-digital-service-catalog-for-speed-and-scale)
- [The Dark Corners of Kotlin Multiplatform](https://www.wearedevelopers.com/videos/100143-the-dark-corners-of-kotlin-multiplatform)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j)