Senior Manager, Cybersecurity Architecture

Business Wire (BW) is advancing its cybersecurity maturity by expanding its emphasis on strategic, architectural, and enterprise-wide security leadership, while continuing to support and strengthen our operational security capabilities. To support this effort, we are introducing the role of Senior Manager, Cybersecurity Architecture
, a senior leader responsible for shaping BW’s cybersecurity strategy, defining and implementing security architecture, collaborating with key security partners, and guiding cybersecurity-related risk decisions across the organization.

This role leads efforts in cloud security, application security, identity and access strategies, Zero Trust, vulnerability management, email security, data protection, privacy requirements, and emerging technology risks—including AI. The Senior Manager will also oversee our external cyber defense partner, ensuring their monitoring, detection, and response services align with BW’s security goals.

This position is highly visible and influential, representing BW’s cybersecurity program to executive leadership, internal and external auditors, and other key enterprise stakeholders involved in cybersecurity governance.

• Cybersecurity Strategy, Architectural & Implementation Leadership:
• Develop and maintain BW’s enterprise cybersecurity strategy and long-term roadmap.
• Lead architecture decisions across cloud, application, identity, data, vulnerability management, and email security domains.
• Oversee the implementation and ongoing maintenance of approved security architectures, controls, and technologies.
• Ensure security controls are properly deployed, configured, validated, and continuously monitored for effectiveness.
• Promote the adoption of Zero Trust principles and secure-by-design engineering practices.
• Offer security guidance for AI projects, automation systems, and other emerging technologies.
• Work with IT and business teams to ensure the secure design and roll-out of new projects.
• Oversight of External Cyber Defense Services:
• Act as BW’s main leader and primary contact for our external cyber defense partner.
• Evaluate the delivery of security monitoring, threat detection, response recommendations, and threat insights.
• Collaborate to enhance detection coverage, response workflows, communication methods, and tuning.
• Evaluate service delivery performance and ensure alignment with BW’s cybersecurity priorities.
• Translate findings and outputs into actionable risk decisions and strategic improvements for the organization.
• Executive-Level Incident Guidance & Communication:
• Provide strategic leadership during cybersecurity incidents, coordinating with IT, Legal, HR, Privacy, Communications, and other stakeholders.
• Serve as the executive-facing cybersecurity representative during significant security events, and coordinate the execution of operational response activities.
• Communicate incident severity, business impact, risks, and recommended remediation actions to executive leadership.
• Lead post-incident reviews and ensure lessons learned are incorporated into long-term improvements.
• Governance, Compliance &
  
  Risk Management:
  
  
• Represent cybersecurity during internal audits, external audits, and cybersecurity assessments conducted by key enterprise stakeholders.
• Maintain alignment with frameworks such as NIST CSF, ISO 27001, SOC2, and relevant privacy regulations.
• Offer senior-level guidance in developing and improving cybersecurity governance programs, policies, standards, and secure architecture guidelines.
• Lead enterprise cybersecurity risk assessments and ensure corrective actions are prioritized and implemented effectively.
• Provide oversight and direction for cybersecurity elements of privacy and data protection initiatives.
• Cloud, Application, Identity & Emerging Technology Security:
• Lead cloud security architecture across AWS and other platforms used by BW.
• Guide secure software development practices and coordinate application security reviews.
• Oversee identity and access management strategies, including modern authentication and privileged access controls.
• Drive Zero Trust adoption across networks, identity, and application environments.
• Establish…