About this role
Role Overview
The Head of
Cybersecurity Engineering & Architecture is responsible for the technical
security of the organization's cloud and technology environment. This role
provides hands-on security leadership across cloud infrastructure, identity,
security tooling, vulnerability management, architecture and technical
controls. The successful
candidate must be able to independently assess technical risk, develop
practical solutions and work directly with technology teams to implement and
validate those solutions.
Key
Responsibilities
- Own cybersecurity engineering and
architecture across the cloud environment.
- Own the enterprise vulnerability
management program, including scanning, risk-based prioritization,
remediation SLAs, exception management, remediation tracking and
reporting.
- Establish security architecture
standards and technical security requirements.
- Assess cloud infrastructure and
identify security weaknesses and control gaps.
- Oversee identity, privileged
access and authentication security.
- Manage security tooling and
technical security controls.
- Evaluate logging, encryption,
endpoint and infrastructure security.
- Coordinate penetration testing and
technical remediation.
- Conduct security architecture
reviews for major technology initiatives.
- Evaluate security monitoring and
detection capabilities.
- Support technical incident
response and security investigations.
- Identify opportunities to automate
security controls, remediation and repetitive processes.
- Partner closely with Technology
and Engineering teams to drive measurable risk reduction.
Requirements
Requirements
- 8+ years of cybersecurity
experience with increasing technical responsibility.
- Strong experience with cloud
security and modern technology environments.
- Deep understanding of
vulnerability management and risk-based prioritization.
- Experience with IAM/PAM, endpoint
security, logging, encryption and security architecture.
- Experience with security tooling,
vulnerability scanning and penetration testing.
- Ability to distinguish material
security risk from lower-value technical findings.
- Strong written and verbal
communication skills.
- Financial services, fintech or
regulated-industry experience preferred.
- Remote- US Shift