Enterprise Security Architect - Risk and Resilience

Freeport McMoRan•Phoenix, AZ

1d•$138,000 - $193,000•Hybrid

About The Position

Architect, govern, and advance enterprise cybersecurity risk and resilience capabilities by providing strategic design and oversight of cyber risk management, resilience, and recovery frameworks aligned with Enterprise Risk Management objectives, business priorities, and regulatory expectations, while serving as a senior technical authority influencing enterprise risk reporting and risk‑informed decision‑making. In this role, you design and maintain enterprise cybersecurity risk and resilience architectures, frameworks, and methodologies supporting risk identification, assessment, reporting, and recovery planning. As the Enterprise Security Architect of Risk & Resilience, you create and maintain short‑ and long‑term enterprise cyber risk and resilience roadmaps aligned with business priorities, critical services, and recovery objectives, define, review, and govern enterprise cyber risk and resilience reporting to ensure accuracy, consistency, and executive‑level visibility using metrics and analysis, and work effectively with internal teams and third‑party providers to ensure risk, resilience, and recovery expectations are understood and monitored. You analyze cyber risk and resilience outcomes, including recovery capabilities, dependency impacts, and gaps, support escalation of material risks, assess current and future enterprise needs and lead framework and governance improvements, ensure analysis of service results and response to escalated delivery issues, and perform other duties as requested.

Requirements

Associates Degree and ten (10) years of experience in security systems technologies and ISACA, SANS, ISC(2), or CEH certification or related security certification, OR
Bachelors Degree in Information Systems or related field and eight (8) years of experience in security systems technologies,OR
Bachelors Degree in Information Systems or related field and six (6) years of experience in security systems technologies and ISACA, SANS, ISC(2), or CEH certification or related security certification, OR
Masters Degree in Information Systems or related field and six (6) years of experience in security systems technologies, OR
Masters Degree in Information Systems or related field and five (5) years of experience in security systems technologies and ISACA, SANS, ISC(2), or CEH certification or related security certifications

Nice To Haves

Active industry‑recognized security and risk certifications such as CISSP, CISM, and/or CRISC
Demonstrated experience supporting and maturing enterprise risk and resilience programs in complex, global environments, including executive‑level risk reporting
Strong background in disaster recovery (DR) strategy, planning, and governance, including recovery objectives, dependency mapping, and alignment with critical technology services.
Demonstrated experience with third party risk management, including assessment of critical vendors, review of resilience and recovery capabilities, and ongoing risk monitoring.
Proven ability to manage risk and control exceptions, including documentation, risk acceptance, compensating controls, executive approvals, and lifecycle tracking.

Responsibilities

Design and maintain enterprise cybersecurity risk and resilience architectures, frameworks, and methodologies supporting risk identification, assessment, reporting, and recovery planning.
Create and maintain short‑ and long‑term enterprise cyber risk and resilience roadmaps aligned with business priorities, critical services, and recovery objectives
Define, review, and govern enterprise cyber risk and resilience reporting to ensure accuracy, consistency, and executive‑level visibility using metrics and analysis
Work effectively with internal teams and third‑party providers to ensure risk, resilience, and recovery expectations are understood and monitored.
Analyze cyber risk and resilience outcomes, including recovery capabilities, dependency impacts, and gaps, support escalation of material risks, assess current and future enterprise needs and lead framework and governance improvements, ensure analysis of service results and response to escalated delivery issues, and perform other duties as requested.