Enterprise Security Architect

This position will serve as the primary security architect for our Advance Distribution Infrastructure program. The program has multiple projects that span from Cloud or OT environment. This role will evaluate, architect and design the technical security controls for the projects, and ensure compliance with the CSF Framework. This role will also assist with the identification and evaluation of security gaps. Identify and integrate sound security controls for applications, systems, and processes for the organization., * Serve as the primary cybersecurity liaison between business units, project teams, technology teams, vendors, and enterprise architecture to ensure solutions, technologies, and initiatives align with established cybersecurity requirements, standards, and risk management practices.

• Provide consultative guidance regarding cybersecurity requirements, approved technologies, architectural patterns, and control expectations.
• Interpret cybersecurity policies, standards, regulatory obligations, and architectural requirements and communicate their impact in a clear and actionable manner.
• Develop, maintain, and govern enterprise cybersecurity standards, technical security requirements, reference architectures, implementation patterns, and design guidance for IT, OT, cloud, and hybrid environments.
• Create and maintain security reference architectures that define approved security controls, integration patterns, and architectural approaches for common technology solutions and business use cases.
• Participate in cybersecurity assessments, architecture reviews, technical risk reviews, vulnerability assessments, penetration testing reviews, threat assessments, and compliance evaluations.
• Analyze identified security findings, vulnerabilities, architectural deficiencies, and control gaps to determine business impact, security risk, and remediation priorities.
• Provides solutions to reduce cyber risk and ensure compliance with the NIST CSF, NERC CIP, TSA Security Directives, DFARS, SOX, PCI, etc.

Licenses/Certifications Required: Certified Information Systems Security Professional (CISSP) or one or more related Information Technology Security professional or vendor certifications (ex: CSSA, CEH, GIAC, etc.) Preferred: Certified Information Systems Security Professional (CISSP), and related Information Technology Security professional or vendor certifications (ex: CEH, CSSA, GIAC, etc.)

Required: 7 years of practical technical experience in an Information Security role. Experience implementing Security Frameworks (ISO 27000, NIST Cyber Security). Candidate Skills Preferred

• Security Architecture background with strong focus on infrastructure security across both IT and OT
• Experience with OT environments, including device connectivity, encryption and integrations
• Ability to evaluate sensor/device configurations, data movement, connectivity, and vendor solutions against established security standards
• Strong communication skills and ability to work across vendors, internal technical teams, risk, governance, and compliance stakeholders
• The role is focused on architecture, assessment, recommendations, and oversight rather than hands-on implementation of security tools