Security Architect

Informa Group . • Newton, MA

1d • Hybrid

About The Position

Informa TechTarget is seeking a strategic Security Architect to define and drive its cloud and enterprise security architecture. The role owns the security architecture vision, establishes governance frameworks, and partners with Product, Engineering, and Infrastructure teams to embed security throughout the technology ecosystem. It is based in the Newton, Massachusetts office, with in-person work three days a week or more and flexibility to work from home or remotely at other times.

The Security Architect owns the enterprise security architecture and its roadmap across cloud, hybrid, and on-premises environments; sets security principles, frameworks, and standards; and presents strategy and security posture to executive leadership. The role leads compliance efforts, audits, assessments, and remediation, and directs cloud security across AWS and GCP. It also guides identity and access management, network security, security platforms, secure software development, DevSecOps, and security architecture for emerging technologies such as AI and LLMs.

The role serves as a technical authority and mentor, advising leaders and engineering teams on security risks, technologies, and practices. It also leads incident response management, develops security policies, identifies vulnerabilities, and recommends controls that balance security needs with business enablement.

Requirements

• Bachelor’s or master’s degree in computer science, information technology, or a related field.
• At least 7 years of cybersecurity experience, with deep cloud security expertise.
• Proven experience leading enterprise security architecture in multi-cloud environments.
• Deep understanding of AWS and GCP security best practices, including organization policies, automated threat detection, centralized logging/SIEM, least-privilege architecture, VPC design and perimeter controls, data exfiltration prevention, encryption and key management, and IAM.
• Expertise in identifying and mitigating web application vulnerabilities using tools and methodologies such as OWASP.
• Experience detecting and addressing vulnerabilities in network configurations and infrastructure through network vulnerability scanning.
• Proficiency securing containerized environments, including Docker and Kubernetes, using best practices and tools such as Trivy or Aqua Security.
• Familiarity with industry-standard tools for vulnerability scanning, penetration testing, and security auditing.
• Ability to lead security discussions with system architects and business leaders.
• Strong analytical and computer skills.
• Expert-level understanding of cybersecurity and its impact on modern businesses.
• Thorough understanding of Unix operating systems.
• Awareness of frameworks such as NIST, COBIT, ISO, and SOC 2.

Nice To Haves

• Certifications such as CISSP, CCSP, AWS Security Specialty, or Google Professional Cloud Security Engineer.

Responsibilities

• Own and evolve enterprise security architecture, long-term roadmaps, and reference architectures for cloud, hybrid, and on-premises environments.
• Define security principles, frameworks, and standards aligned with business objectives and regulatory requirements.
• Develop and present security strategies, roadmaps, and initiatives to executives and stakeholders; establish metrics and KPIs to communicate architecture effectiveness and security posture.
• Ensure compliance with ISO 27001, SOC 2, GDPR, SOX, and other applicable standards; lead audits and assessments and drive remediation and continuous improvement.
• Own cloud security architecture across AWS and GCP, including CSPM, CIEM, and Wiz remediation strategies.
• Design least-privilege and Zero Trust IAM architecture, secure network segmentation, and defense-in-depth controls.
• Own the architecture and strategic direction of security platforms, including SIEM, vulnerability management, endpoint security, and threat detection; manage and optimize those platforms.
• Design secure cloud infrastructure and hybrid-environment protections that scale with business growth; conduct threat modeling and risk analyses and recommend mitigations.
• Lead Secure Software Development Lifecycle (SDLC) and DevSecOps initiatives; integrate security controls into CI/CD pipelines and promote shift-left security practices.
• Guide application and software architecture to mitigate vulnerabilities and prevent exploits; mentor development and DevOps teams on secure coding practices and emerging threats.
• Collaborate across teams to embed security throughout the system development lifecycle and define controls that support agile development while maintaining security.
• Lead security architecture for emerging technologies, including AI/LLM initiatives, and ensure responsible and secure implementation.
• Advise on security technologies and risks associated with proposed changes; keep current with threats, vulnerabilities, and technologies to improve security practices.
• Influence engineering teams to adopt security principles and partner with Product, Engineering, and Infrastructure leaders to align security architecture with business innovation.
• Produce security documentation, architecture diagrams, design specifications, and security control matrices.
• Lead incident response management and develop policies to protect organizational assets from cyber threats.
• Identify organizational vulnerabilities through systematic assessments and recommend and implement security controls that balance security requirements with business enablement.

Benefits

• Open Vacation, 10 national holidays, and the opportunity to work from almost anywhere for up to four weeks per year.
• 401(k) match.
• Health insurance.
• Vision insurance.
• Dental insurance.
• Parental leave.
• Employee stock purchase plan (ESPP) offering company shares at a minimum 15% discount.
• Employee assistance program (EAP) support, mental health first aiders, and free access to a wellness app.
• Up to four days per year to volunteer with a philanthropic organization.
• Bespoke training and learning, mentoring platforms, and on-demand access to LinkedIn Learning courses.
• Support for internal job moves.
• Community events, charity day, and colleague groups and networks.
• Global awards and recognition programs.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior