Global Sr Enterprise Security Architect (Director level)

Booking Holdings (NASDAQ: BKNG)•Norwalk, CT

8d•$218,700 - $267,300•Hybrid

About The Position

The Global Sr Enterprise Security Architect (Director level) is a high-impact, strategic leadership role responsible for the long-term security enterprise architecture vision across all Booking Holdings brands. This Senior role is an individual contributor role operates with extreme ownership, driving the end-to-end strategy from initial conceptualization to global adoption. You will act as a primary security consultant to brand CISOs and the global Chief Security Officer, bridging the gap between complex technical safeguards and business-critical revenue protection. You are not just a designer; you are a change agent who balances high-level strategy with the pragmatic agility required in a world-class travel technology ecosystem. The ideal candidate must be current with leading industry developments and practices and bring thought leadership to the security team and BKNG overall. We are looking for a collaborative executive with deep expertise in: Cloud-native security architecture (multi-cloud) Identity & access (human + machine identity) API and application security Zero trust architectures Strong understanding of modern attack surface (SaaS, xIoT, AI, third-party) Experience in building up a new security enterprise architecture function that was not there before (as an IC) - strategy, influencing, M&A, integration deployment experience is a plus Strategic Thinking Ability to translate threat landscape → architecture decisions → business outcomes Experience building scalable, repeatable architecture patterns. Are you ready to define the unified AI security architecture vision for the world's leading online travel ecosystem? Step into a collaborative leadership role where you will craft and execute the immediate and long-term AI security architecture strategy for Booking Holdings and all brands (Booking.com, Priceline, Agoda, Kayak, OpenTable). We are looking for an exceptional communicator and tech strategist with a proven track record in complex, globally federated organizations. You won't just design the blueprints; you will drive the hands-on deployment of AI security technologies to production, such as securing enterprise GenAI chatbots. If you already have experience in this and excel at accelerating business velocity while perfectly balancing central governance with local autonomy, this is your mandate at scale! You will drive the current and future AI security architecture, embed security by design principles into engineering, product, and AI development lifecycles and realize a measurable uplift in identity, cloud and API security and enable faster product delivery with embedded security guardrails!

Requirements

Master's Degree
Significant years of security enterprise architecture experience
Experience in building up a new function that was not there before (as an IC) - strategy, influencing
Proven ability to translate the mission ("Making it easier for everyone to experience the world") into a resilient technical reality.
Mastery of Cloud/Hybrid Security, Identity (IAM), Zero Trust architectures, and Secure SDLC.
Experience with AI-driven security operations is highly preferred.
Someone who has started as an enterprise security architect and did this at more companies is highly preferred.
Superb ability to communicate "Risk vs. Reward" to non-technical executives.
Ability to turn "No" into "Yes, if..." through expert negotiation.
A track record of taking complex, ambiguous problems and driving them to a successful conclusion with minimal guidance.
Ability to apply lateral thinking to solve global-scale security challenges while maintaining the speed of a high-growth tech company.

Nice To Haves

M&A, integration deployment experience is a plus
CISSP-ISSAP, CCSP, or SABSA Chartered Architect preferred.

Responsibilities

Lead the evolution of the Booking Holdings Security Architecture blueprint, ensuring its long-term viability and anticipation of emerging threats and the 3-5 year business roadmap.
Own the governance lifecycle, independently identifying gaps in current brand implementations and driving remediation without day-to-day oversight.
Act as a key advisor to Brand CISOs and the Global Chief Security Officer, persuading and aligning senior leadership on security investments that balance risk with commercial velocity.
Provide "North Star" guidance to security engineers across brands and act as the final escalation point for complex architectural disputes or trade-offs.
Lead high-stakes vendor assessments, ensuring chosen solutions provide a competitive advantage through superior ROI and integration.
Proactively identify opportunities for brands to share security services or tools, driving efficiency and a unified defense posture across the enterprise.
Drive the current and future AI security architecture.
Embed security by design principles into engineering, product, and AI development lifecycles.
Realize a measurable uplift in identity, cloud and API security.
Enable faster product delivery with embedded security guardrails.