Cybersecurity Architect

Wills Group, Inc•La Plata, MD

67d•$100,000 - $125,000•Hybrid

About The Position

The Cybersecurity Architect is the primary point of contact and subject matter expert for enterprise cybersecurity initiatives at Wills Group. The role leads the planning, design, implementation, operational management, and continuous improvement of the cybersecurity program and security architecture, advancing security maturity through control design, operational improvements, governance, risk reduction, and strategic technology recommendations. The position evaluates, recommends, designs, implements, and maintains enterprise security technologies, standards, and controls across infrastructure, endpoint, identity, cloud, network, and operational environments. It serves as the primary escalation point and technical advisor for cybersecurity operations, vulnerability remediation, security governance, compliance, and incident response coordination. The role balances organizational risk, operational requirements, implementation feasibility, and budget considerations, and provides recommendations to IT leadership and executive stakeholders. The Cybersecurity Architect leads initiatives including vulnerability management and remediation, security monitoring and MDR coordination, penetration testing and remediation, PCI DSS compliance, security awareness, technology and vendor evaluations, roadmap development, security standards, audits, infrastructure improvements, cybersecurity insurance reviews, disaster recovery exercises, and GRC. The position operates both strategically and operationally within IT and is the primary driver of cybersecurity initiatives and security posture improvements. This is a hybrid position requiring 2 to 3 days onsite at the La Plata, Maryland headquarters, typically Tuesday through Thursday, with the remainder remote or at retail store locations. The schedule may vary based on duties, project milestones, and business initiatives. Core operating hours are Monday through Friday, 8:00 AM to 4:30 PM EST.

Requirements

Bachelor’s degree in Information Security, Cybersecurity, Information Technology, or equivalent professional experience.
At least 5 years of IT experience in infrastructure, security, systems, or related disciplines.
Experience leading enterprise cybersecurity initiatives and operational security improvements in a small-to-mid-sized organization.
Experience evaluating, implementing, and managing enterprise security technologies and vendor solutions.
Experience coordinating vulnerability management, remediation planning, security monitoring, and incident response activities.
Experience supporting or leading PCI DSS compliance initiatives, penetration testing remediation, and GRC activities.
Strong understanding of enterprise security architecture principles, security controls, risk management, and operational security practices.
Experience balancing security priorities, operational requirements, and budget considerations when recommending solutions and improvements.
Demonstrated analytical, problem-solving, and project leadership skills.

Nice To Haves

Experience with Palo Alto Firewalls, Zscaler ZIA/ZPA, Microsoft Defender for Endpoint, Microsoft Intune, Microsoft Advanced Threat Protection, KnowBe4, Meraki Networking, Tenable/Qualys, Cybera Firewalls, NCR, Gilbarco, or Verifone Data Security.
Working knowledge of retail payment systems and PCI DSS merchant-level requirements.
Experience operating within lean or resource-constrained IT/security organizations.
Experience coordinating MDR, SOC, or managed security service providers.
Working knowledge of scripting, automation, or programming concepts.

Responsibilities

Design and implement enterprise security solutions and control frameworks across cloud, endpoint, identity, network, and infrastructure environments.
Develop security standards, technical baselines, architectural recommendations, and security best practices.
Evaluate cybersecurity technologies and vendor solutions, and lead their implementation and related operational improvements.
Improve security maturity through ongoing enhancement of tools, processes, monitoring, and operational controls.
Develop remediation strategies and lead organization-wide vulnerability reduction initiatives.
Review architectures and systems for consistency with organizational guidelines, policies, and standards.
Define security requirements through risk assessments, threat modeling, testing, and analysis of existing systems.
Create action plans for policy and governance, system hardening, monitoring, incident response, disaster recovery, and emerging threats.
Use security information and event management (SIEM), data loss prevention (DLP), intrusion prevention systems (IPS), and other tools in security action plan designs.
Manage vendors monitoring for anomalous or malicious activity and coordinate incident response and remediation.
Partner with Infrastructure, Field Services, NOC, SOC, MDR, and managed service providers to improve monitoring, escalation, remediation, security response, and implementations.
Serve as the primary contact for cybersecurity incidents, security vendors, zero-day threats, and remediation efforts.
Partner with Risk as the primary IT liaison to develop contingency plans and support business continuity.
Co-develop disaster recovery and incident response preparedness activities.
Lead PCI DSS compliance initiatives and maintain policies consistent with Level 1 merchant requirements.
Coordinate external penetration tests, remediation tracking, and security assessments.
Support cybersecurity insurance reviews and internal and external compliance initiatives.
Lead GRC activities, including risk tracking, remediation prioritization, and security policy development.
Develop and maintain security policies, standards, and procedures aligned with business objectives and regulatory requirements.
Follow a compliance framework and report on compliance progression and maturity.
Own and coordinate enterprise cybersecurity initiatives and operational security improvements.
Manage security project planning, prioritization, implementation timelines, vendor coordination, and budget-aware recommendations.
Lead evaluation and prioritization of controls, remediation initiatives, and operational risk reduction strategies.
Compile and present security metrics, KPI reports, emerging threat analysis, risk summaries, and operational updates to leadership.
Research emerging cybersecurity threats, industry trends, and technologies to improve security posture.
Develop and deliver cybersecurity awareness training and educational initiatives.
Promote security best practices and security-first operational behaviors across the organization.

Benefits

Employer 401(k) match, currently at 7%.
Health savings plan and financial planning.
Comprehensive health, vision, and dental plans.
Pet-related benefits are mentioned, but not specified.
Vacation, sick, personal, community engagement, and parental leave.
Hybrid and flexible work environment.
Employee Assistance Program.
Travel assistance and family life planning.
100% tuition reimbursement.
Development programs and certificate program assistance, up to 100% employer-paid.
Competitive salary matched to the DC Metro area.