Enterprise Cybersecurity Architect

Southern Glazer’s Wine and Spirits, LLC•Addison, TX

1d•Onsite

About The Position

The Enterprise Cybersecurity Architect acts as a strategic cybersecurity leader, guiding the organization’s security architecture, cyber risk reduction, and secure technology transformation initiatives. In this role, the Enterprise Cybersecurity Architect provides expert guidance on applying existing, new, and emerging security technologies and architecture practices to protect enterprise assets, enable secure business growth, and strengthen the organization’s cyber resilience. This role operates as a senior individual contributor and enterprise technical authority, influencing strategy, standards, and architecture direction through expertise, governance, and cross-functional leadership rather than direct people management. This role leads the cybersecurity architecture function, translating threat intelligence, regulatory expectations, business priorities, and enterprise technology strategy into security roadmaps, reference architectures, standards, and design patterns. The Enterprise Cybersecurity Architect ensures that solutions are secure by design, resilient, scalable, maintainable, and aligned to the organization’s long-term cybersecurity and business objectives.

Requirements

Master’s or Bachelor’s degree in related field (e.g., Cybersecurity, Computer Science, Computer Engineering, Information Technology, Information Assurance, System Analysis, or related discipline) or equivalent combination of education and work experience.
Typically, 15+ years of experience in IT, cybersecurity, and business/industry, including strategic and operational planning across multiple technology and security disciplines.
This includes 10+ years of relevant architecture experience spanning security, infrastructure, cloud, application, data, identity, and technical architecture domains, with 5+ years leading enterprise-wide cybersecurity architecture strategy, governance, portfolio roadmaps, or large-scale secure transformation initiatives.
Demonstrated experience shaping cybersecurity architecture strategy, governance, standards, control patterns, and reference architectures for an enterprise technology portfolio, with proven ability to influence cybersecurity and technology roadmaps at the executive level.
Demonstrated ability to influence and align C-suite, senior technology, risk, compliance, and business stakeholders, building executive consensus on cybersecurity architecture direction and investment decisions.
Track record of delivering measurable risk reduction and business outcomes through cybersecurity architecture, such as improved resilience, reduced attack surface, stronger identity and access controls, vulnerability reduction, secure modernization, and portfolio simplification.
Experience working across diverse security and technology environments, including cloud, SaaS, IaaS, PaaS, network, endpoint, identity, application, data protection, and enterprise platform ecosystems.
Strong written and verbal communication skills, with the ability to translate complex cybersecurity concepts for executive, technical, and business audiences.
Experience in DevSecOps, Agile technology environments, threat modeling, secure SDLC, cloud security architecture, AI/GenAI security, cyber risk quantification, and related advanced security practices preferred.

Nice To Haves

Expert knowledge of cybersecurity architecture frameworks, control frameworks, and security standards such as NIST CSF, NIST 800-53, ISO 27001, CIS Controls, SABSA, zero trust, secure SDLC, threat modeling, and risk-based architecture decisioning.
Expert knowledge of modern security architecture patterns across AWS cloud services, SaaS, IaaS, PaaS, microservices, APIs, identity and access management, privileged access, encryption, key management, secrets management, event-driven architecture, data protection, and security analytics; relevant certifications may include CISSP, CCSP, CISM, SABSA, TOGAF, AWS/Azure security certifications, or similar credentials.
Expert knowledge of business, operating, risk, and financial models—including cost-benefit analysis, cyber risk quantification, and risk management—with proven ability to set cybersecurity architecture direction, create security roadmaps, and govern current and target state at the enterprise level.
Proven ability to assess cyber threat trends, attack surface exposure, emerging technologies, and regulatory drivers; author executive position papers identifying strategic cyber risks, opportunities, and recommended investments.
Proven ability to lead cross-functional teams across cybersecurity, infrastructure, engineering, applications, cloud, data, risk, privacy, and compliance; develop and mentor architects at all levels through coaching and delegation.
Recognized thought leader in cybersecurity architecture with a track record of influencing enterprise security strategy, reducing systemic cyber risk, enabling secure business transformation, and advising C-suite stakeholders on cybersecurity investment decisions.

Responsibilities

Lead the development of enterprise cybersecurity architecture vision and technology direction, connecting business strategy, cyber risk priorities, and security capabilities through actionable architecture roadmaps and guiding principles.
Shape and maintain the cybersecurity architecture roadmap across identity, infrastructure, cloud, applications, data, network, endpoint, third-party, and operational technology domains; coordinate investment plans, interdependencies, and enterprise priorities.
Serve as a senior security design authority for the most complex, high-risk, cross-portfolio solutions; lead cybersecurity architecture governance; and ensure adherence to security roadmaps, standards, policies, and control requirements.
Establish and maintain authoritative security design patterns, reference architectures, control patterns, and cybersecurity architecture standards to drive consistent adoption across the enterprise.
Define security architecture guidance for emerging technologies, including AI and Generative AI, with attention to data protection, access controls, model risk, responsible AI practices, and secure lifecycle standards.
Assess external cyber threat trends, emerging attack techniques, regulatory expectations, and security technology forces; author executive position papers that identify strategic cyber risks, opportunities, and required investments.
Ensure vendor, platform, and security technology selections align with enterprise cybersecurity strategy, risk appetite, control objectives, and long-term architecture direction.
Drive security-by-design, zero trust, least privilege, defense-in-depth, segmentation, secure configuration, data protection, and resilience principles across the technology portfolio.
Partner with security operations, risk management, infrastructure, engineering, application, data, privacy, and compliance teams to ensure architectures support threat detection, incident response, disaster recovery, vulnerability management, and regulatory obligations.
Prioritize remediation of architectural security debt, legacy risk, and systemic control gaps; define measurable outcomes that reduce likelihood and impact of cybersecurity events.
Set and reinforce the enterprise security architecture quality bar by establishing expectations for secure engineering, operational readiness, logging, monitoring, resilience, and incident response integration.
Expand cybersecurity architecture capacity by mentoring architects and engineers, delegating to qualified security architecture leaders, and championing a security-first architecture culture and common language across SGWS.