Director, Security Architecture & Engagement

Our client, a leading media & entertainment company, is seeking a Director
- Security Architecture and Engagement to lead a team of security architects and engineers while personally driving the relationships that make secure-by-design possible: helping stakeholders understand requirements, navigate security processes, remove barriers, and make informed risk-based decisions. This is not primarily a compliance-enforcement role. It is a business-enablement role: the Director succeeds by building trust with stakeholders, simplifying cybersecurity complexity, and helping teams deliver innovative capabilities securely and efficiently, while staying close enough to the architecture and engineering work to remain credible with the technologists doing it.

You’ll partner with peer Directors across Strategy, Engineering and Architecture and with technology and business leaders across the enterprise to make sure new solutions are secure by design, not bolted on after the fact. This position is W-2 only. We do not work with third-party firms or C2C arrangements for this role.

• Serve as a primary cybersecurity advisor to business, technology, product, and engineering leaders across the enterprise
• Build trusted relationships with stakeholders by providing practical, business-focused security guidance rather than one-size-fits-all mandates
• Translate complex security and architecture requirements into clear, actionable recommendations for both technical and executive audiences
• Facilitate productive conversations between business teams, architects, engineers, compliance partners, and security stakeholders
• Help teams understand security expectations early in planning and delivery, so security is a design input rather than a late-stage gate
• Collaborate with business and technology leaders to understand their strategies, objectives, and roadmaps, and align cybersecurity architecture to those priorities
• Enable project teams to navigate cybersecurity review and governance processes efficiently; identify viable paths forward when security concerns arise rather than simply blocking them
• Educate stakeholders on security standards, approved patterns, and secure implementation approaches; promote self-service knowledge and repeatable patterns that reduce friction
• Drive a positive customer experience for teams engaging with GIS and SEA services and identify opportunities to streamline reviews and reduce organizational risk
• Lead security engagement with strategic vendors and third parties, partnering with procurement, legal, and business teams throughout evaluation and onboarding
• Design complex security frameworks and integrations across people, processes, and technology; define specifications and integration parameters for compatibility across platforms
• Conceive, visualize, and communicate architecture models, strategies, and reference architectures used across multiple products, systems, and teams
• Provide multi-layered technical expertise for next-generation initiatives such as Zero Trust Network Architecture, Data Security, AI Security, Identity and Access Management, and Secure Access
• Lead regular Architecture Engagement Meetings with leadership: establish and maintain architecture standards, design patterns, and prescriptions, and guide evaluation of new technology through research and hands-on lab work
• Ensure the creation and maintenance of security architecture artifacts, including reference architectures, control frameworks, design patterns, standards, and policies, and support governance through control mapping and alignment to frameworks such as NIST 800-53, CIS Benchmarks, and ISO 27001
• Guide advanced risk and threat analysis activities, including threat modeling, architecture risk reviews, and vulnerability assessments, ensuring internal incident trends and external threat intelligence inform architectural decisions and mitigations
• Partner with business-unit Solutions Engineering and Enterprise Architecture teams to integrate Dev Sec Ops  and product security practices, shepherding end-to-end security tollgates for application development
• Adopt and evangelize GIS risk index/KPIs to shift the security program from coverage-based to risk-based decision-making
• Work with other architects to optimize cloud infrastructure and deliver secure, cost-effective compute across AWS, Azure, and GCP
• Lead, mentor, and grow a team of security architects and engineers, including partners located outside the U.S.; manage issues and…