Cybersecurity Architect

Wills Group, Inc•La Plata, MD

2d•$100,000 - $125,000•Hybrid

About The Position

The Cybersecurity Architect plays a critical role in protecting the Wills Group organization and serves as the primary point of contact and subject matter expert of enterprise cybersecurity initiatives. This role is responsible for driving the planning, design, implementation, operational management, and continuous improvement of the organization’s cybersecurity program and security architecture. The Cybersecurity Architect functions as the lead technical security resource responsible for advancing cybersecurity maturity across the enterprise through security control design, operational improvements, governance leadership, risk reduction initiatives, and strategic technology recommendations. This role is responsible for evaluating, recommending, designing, implementing, and maintaining enterprise security technologies, standards and security controls across infrastructure, endpoint, identity, cloud, network, and operational environments. The Cybersecurity Architect serves as the primary escalation point and technical advisor for cybersecurity operations, vulnerability remediation, security governance, compliance initiatives, and incident response coordination. The Cybersecurity Architect independently leads security initiatives involving: Vulnerability management strategy and remediation Security monitoring and MDR operational coordination Penetration testing scope and remediation management PCI compliance and governance initiatives Security awareness and organizational training Vendor and security technology evaluations Security roadmap development and operational maturity improvements Security standards, baselines, and architectural recommendations This role requires balancing organizational risk, operational requirements, implementation feasibility, and budget considerations while providing strategic security recommendations to IT leadership and executive stakeholders. The Cybersecurity Architect will proactively lead efforts surrounding: PCI DSS compliance initiatives Cybersecurity audits Network and infrastructure security improvements Cybersecurity insurance reviews External penetration testing coordination Disaster recovery and tabletop exercises Governance, Risk, and Compliance (GRC) initiatives The Cybersecurity Architect is expected to operate both strategically and operationally within our IT department and will serve as the primary driver for advancing the organization’s cybersecurity initiatives and security posture.

Requirements

Bachelor’s degree in Information Security, Cybersecurity, Information Technology, or equivalent professional experience.
Minimum 5+ years of IT experience in infrastructure, security, systems, or related disciplines.
Experience leading enterprise cybersecurity initiatives and operational security improvements in a small-to-mid-sized organization.
Experience evaluating, implementing, and managing enterprise security technologies and vendor solutions.
Experience coordinating vulnerability management, remediation planning, security monitoring, and incident response activities.
Experience supporting or leading PCI DSS compliance initiatives, penetration testing remediation, and Governance, Risk, and Compliance (GRC) activities.
Strong understanding of enterprise security architecture principles, security controls, risk management, and operational security practices.
Experience balancing security priorities, operational requirements, and budget considerations when recommending solutions and improvements.
Demonstrated analytical, problem-solving, and project leadership skills.

Nice To Haves

Experience with technologies such as: Palo Alto Firewalls, Zscaler ZIA / ZPA, Microsoft Defender for Endpoint, Microsoft Intune, Microsoft Advanced Threat Protection, KnowBe4, Meraki Networking, Tenable / Qualys, Cybera Firewalls, NCR, Gilbarco, Verifone Data Security
Working knowledge of retail payment systems and PCI DSS merchant-level requirements
Experience operating within lean or resource-constrained IT/security organizations
Experience coordinating MDR, SOC, or managed security service providers
Working knowledge of scripting, automation, or programming concepts

Responsibilities

Design and implement enterprise security solutions and security control frameworks across cloud, endpoint, identity, network, and infrastructure environments.
Develop security standards, technical baselines, architectural recommendations, and security best practices for enterprise systems and operations.
Evaluate, recommend, and lead implementation of cybersecurity technologies, vendor solutions, and operational security improvements.
Drive security maturity improvements through continuous enhancement of tools, processes, monitoring capabilities, and operational controls.
Develop remediation strategies and lead vulnerability reduction initiatives across the organization.
Reviews current architectures and systems to ensure consistency and compliance with the organization's guidelines, policies, and standards.
Defines and develops security requirements using risk assessments, threat modeling, testing, and analysis of existing systems.
Creates action plans for policy creation and governance, system hardening, monitoring, incident response, disaster recovery, and emerging cybersecurity threats.
Utilizes security information and event management (SEIM), data loss prevention (DLP), intrusion prevention systems (IPS), and other tools in action plan designs.
Manage vendors to monitor and detect anomalous or malicious activity within the environment and coordinate incident response and remediation activities as necessary.
Partner with Infrastructure, Field Services, NOC, SOC, MDR, and Managed Service Providers to improve threat monitoring, escalation processes, vulnerability remediation, operational security response and implementations.
Serve as the primary point of contact for cybersecurity incidents, security vendors, zero-day threats, and remediation efforts.
Primary IT liaison partnering with Risk to represent IT and to develop contingency plans and support business continuity.
Co-Develop disaster recovery and incident response preparedness activities.
Lead PCI DSS compliance initiatives and maintain compliance policies in accordance with Level 1 merchant requirements.
Coordinate external penetration testing engagements, remediation tracking, and security assessment activities.
Support cybersecurity insurance reviews and internal/external compliance initiatives.
Lead Governance, Risk, and Compliance (GRC) activities including risk tracking, remediation prioritization, and security policy development.
Develop and maintain security policies, standards, and procedures aligned with business objectives and regulatory requirements.
Follow a framework for compliance and report on the progression / maturity.
Serve as the primary owner and coordinator of enterprise cybersecurity initiatives and operational security improvements.
Manage security project planning, prioritization, implementation timelines, vendor coordination, and budget-aware security recommendations.
Lead evaluation and prioritization of security controls, remediation initiatives, and operational risk reduction strategies.
Compile and present security metrics, KPI reporting, emerging threat analysis, risk summaries, and operational security updates to leadership teams.
Research emerging cybersecurity threats, industry trends, and evolving technologies to improve organizational security posture.
Develop and deliver cybersecurity awareness training and educational initiatives across the organization.
Promote organizational adoption of security best practices and security-first operational behaviors.

Benefits

Employer 401(k) match (currently at 7%)
Health savings plan
Financial planning
Comprehensive health, vision, and dental plans
Pet insurance
Vacation, sick, personal, community engagement, and parental leave for new parents.
Hybrid and Flexible work environment
Employee Assistance Program
Travel assistance
Family life planning
100% tuition reimbursement
Robust development programs
Certificate program assistance (up to 100% employer-paid)
Competitive Salary