Director, Security Architecture and Engineering

CFA Institute•Charlottesville, VA

1d•$122,300 - $163,100

About The Position

The Director, Security Architecture and Engineering leads the design, implementation, and continuous improvement of security architecture and engineering capabilities across the organization. This role is responsible for executing security strategies through scalable, resilient, and secure technology solutions spanning cloud and on-premises environments. With a strong focus on delivery and operational effectiveness, the Director translates enterprise security objectives into actionable architecture standards, engineering roadmaps, and implementation plans. The role leads a team of architects and engineers and works closely with IT and business stakeholders to embed secure-by-design principles and strengthen the organization’s security posture.

Requirements

Bachelor’s degree in Computer Science, Engineering, Information Security, or related field, or equivalent experience.
Progressive experience in cybersecurity architecture and engineering, including people leadership responsibilities.
Demonstrated success implementing security solutions in cloud and hybrid environments.
Strong technical expertise across security domains and modern infrastructure platforms.
Experience leading delivery of complex technical initiatives across multiple teams.
Solid understanding of DevSecOps, cloud security, and infrastructure security practices.
Effective communication skills with the ability to collaborate across technical and business teams.
Strong organizational and execution skills, including resource and priority management.

Nice To Haves

Relevant certifications (e.g., CISSP, CISM, CISA, SABSA, or cloud security certifications) preferred.

Responsibilities

Lead the implementation and ongoing enhancement of security architecture and engineering practices aligned with enterprise security strategy.
Develop and maintain security standards, reference architectures, and design patterns across infrastructure, applications, and cloud platforms.
Oversee security engineering activities, including cloud security, network security, identity and access management, encryption, and monitoring controls.
Ensure secure-by-design and DevSecOps practices are integrated into system development and operational workflows.
Translate strategic security priorities into actionable roadmaps, projects, and deliverables.
Manage and develop a team of security architects and engineers; provide coaching, performance management, and capability development.
Partner with IT and business teams to deliver secure, scalable, and reliable technology solutions.
Drive improvements in security tooling, automation, and processes to enhance operational efficiency.
Establish and track key performance indicators (KPIs) to measure effectiveness of architecture and engineering outcomes.
Support compliance initiatives by implementing and maintaining controls aligned with frameworks such as ISO 27001, NIST, and SOC 2.
Contribute to risk management activities, including security assessments, remediation planning, and control improvements.
Provide technical expertise and guidance on emerging security technologies, threats, and best practices.