Director, Cybersecurity Architecture

Crowley Maritime Corporation•Jacksonville, FL

9d•Hybrid

About The Position

The Director, Cybersecurity Architecture leads cybersecurity architecture and engineering across the enterprise. The role establishes security standards, reference architectures, technical controls, and reusable design patterns that enable secure technology delivery. It partners with Technology and business teams to integrate security early, balance cyber risk with business priorities, and address commercial, government, regulatory, and contractual requirements. The director translates cyber risk into clear business conversations about exposure, trade-offs, investment needs, and recommended actions. The position also leads the Security Operations Center and cybersecurity incident response capability, including monitoring, detection, investigation, containment, recovery coordination, threat intelligence, and digital forensics. It manages and develops cybersecurity architects and engineers and coordinates security work across enterprise technology teams and relevant business, legal, risk, customer, government, and regulatory stakeholders. The work arrangement is hybrid.

Requirements

Bachelor's degree in computer science, information systems, business, or a related field; or a combination of post-high-school education and experience equal to nine years.
10+ years of progressively responsible experience in cybersecurity, enterprise architecture, infrastructure, cloud, security operations, or related technology disciplines.
At least five years of leadership experience.
Demonstrated experience leading or overseeing a Security Operations Center and major cybersecurity incident response.
Experience building security architectures, roadmaps, and investment plans; coordinating delivery across multiple technology teams; and presenting cyber risk, options, and recommendations to executive and business audiences.
Strong knowledge of enterprise security architecture and secure-by-design practices; cloud and hybrid infrastructure; identity and Zero Trust; network, endpoint, application, and data security; encryption and key management; security monitoring and automation; and architecture threat modeling.
Strong working knowledge of SOC operations, incident command, detection engineering, logging and telemetry, threat intelligence, vulnerability management, digital forensics, and incident response.
Experience applying government and industry frameworks such as NIST, CMMC, ISO 27001, or comparable standards.
One of the following certifications: CISSP, CISM, or CCISO.
Ability to travel and participate in incident, regulatory, customer, or executive discussions when architecture expertise is required.

Nice To Haves

Experience in government, regulated, critical infrastructure, operational technology, maritime, or similarly complex environments.
Familiarity with operational technology and critical-infrastructure security principles.

Responsibilities

Develop and maintain the cybersecurity architecture roadmap, aligning priorities, dependencies, and milestones with enterprise technology roadmaps and business plans.
Establish and maintain security architecture principles, reference architectures, technical standards, control baselines, and reusable design patterns.
Lead secure-by-design reviews through enterprise architecture and technology governance processes, ensuring security requirements and approved conditions are addressed before deployment.
Coordinate cybersecurity architecture and engineering plans with Infrastructure, IT Operations, Applications, Data, Cloud, Enterprise Architecture, and other technology teams.
Develop and manage budgets, forecasts, and business cases for cybersecurity architecture and engineering capabilities, connecting investments to risk reduction, regulatory needs, resilience, and business outcomes.
Translate cyber threats, vulnerabilities, and control gaps into clear business impacts, options, and recommendations for executives and non-technical stakeholders.
Provide architecture guidance across cloud, identity, network, endpoint, application, data, operational technology, IoT, and other connected environments.
Define security acceptance criteria, required telemetry, and engineering requirements; partner with delivery teams to implement, validate, and operationalize approved designs.
Evaluate security technologies and services based on business fit, architecture alignment, risk reduction, supportability, cost, and integration requirements.
Govern technical exceptions and security design debt, including documented rationale, compensating controls, accountable owners, and remediation plans.
Lead the Security Operations Center and cybersecurity incident response capability, including monitoring, detection, investigation, containment, recovery coordination, threat intelligence, digital forensics, escalation, and continuous improvement.
Establish the SOC operating model, service expectations, response plans, playbooks, escalation paths, performance measures, and coordination processes with Technology, Legal, Risk, Communications, and business teams.
Use operational findings, incidents, assessments, audits, and technology changes to improve security patterns and priorities.
Lead, coach, and develop cybersecurity architects and engineers, build cross-functional communities of practice, and reduce single-person dependencies.
Maintain effective relationships with business leaders, technology teams, Legal, Risk, vendors, customers, and government or regulatory stakeholders, as appropriate.