Enterprise Security Architect

In this role, you will serve as the primary security architect for an Advanced Distribution infrastructure program spanning cloud and OT environments., * Evaluate, architect, and design the technical security controls for the projects and ensure compliance with the CSF Framework.

• Assist with the identification and evaluation of security gaps.
• Identify and integrate sound security controls for applications, systems, and processes for the organization.
• Serve as the primary cybersecurity liaison between business units, project teams, technology teams, vendors, and enterprise architecture to ensure solutions, technologies, and initiatives align with established cybersecurity requirements, standards, and risk management practices.
• Provide consultative guidance regarding cybersecurity requirements, approved technologies, architectural patterns, and control expectations.
• Interpret cybersecurity policies, standards, regulatory obligations, and architectural requirements and communicate their impact in a clear and actionable manner.
• Develop, maintain, and govern enterprise cybersecurity standards, technical security requirements, reference architectures, implementation patterns, and design guidance for IT, OT, cloud, and hybrid environments.
• Create and maintain security reference architectures that define approved security controls, integration patterns, and architectural approaches for common technology solutions and business use cases.
• Participate in cybersecurity assessments, architecture reviews, technical risk reviews, vulnerability assessments, penetration testing reviews, threat assessments, and compliance evaluations.
• Analyze identified security findings, vulnerabilities, architectural deficiencies, and control gaps to determine business impact, security risk, and remediation priorities.
• Provide solutions to reduce cyber risk and ensure compliance with the NIST CSF, NERC CIP, TSA Security Directives, DFARS, SOX, PCI, etc.

• 7 years of practical technical experience in an Information Security role.
• Experience implementing Security Frameworks (ISO 27000, NIST Cybersecurity).
• Security Architecture background with strong focus on infrastructure security across both IT and OT
• Experience with OT environments, including device connectivity, encryption, and integrations
• Ability to evaluate sensor/device configurations, data movement, connectivity, and vendor solutions against established security standards
• Strong communication skills and ability to work across vendors, internal technical teams, risk, governance, and compliance stakeholders
• The role is focused on architecture, assessment, recommendations, and oversight rather than hands-on implementation of security tools
• Must be legally authorized to work in the US without sponsorship, now and in the future.

Required Certificate: (Must have)

• Certified Information Systems Security Professional (CISSP) and/or one or more related Information Technology Security professional or vendor certifications (ex: CSSA, CEH, GIAC, etc.)