Security Architecture Lead

Overview

The Cyber Security Architecture Lead plays a key role in securing digital transformation initiatives, integrating security into infrastructure and application design, and supporting the secure adoption of cloud and hybrid technologies across regions. Working closely with security leadership, the architect evaluates technical risks, identifies control gaps, and translates regulatory and threat requirements into sustainable, scalable solutions. The role requires a deep understanding of cybersecurity frameworks, cloud and on-prem infrastructure, application development, and modern identity and access paradigms.

A successful candidate will be an experienced technologist with strong interpersonal skills, capable of communicating architecture decisions to both technical and executive audiences. The Security Architect collaborates with IT, product, manufacturing, and MSSP teams to ensure enterprise-wide security posture is robust, measurable, and resilient. The Security Architect serves as the authoritative technical voice on security design decisions, providing governance oversight and approval authority for architecture across IT, OT, and product domains.

• Design, document, and maintain enterprise-wide security architecture across regions aligned to global cybersecurity strategy and business objectives.
• Define and enforce security reference architectures, design patterns, and guardrails for enterprise IT, OT, and product environments.
• Provide security architecture oversight for new projects and technologies, including IT infrastructure, cloud migration, application development, and vendor solutions.
• Collaborate with each region’s IT, product, and operations teams to integrate security early in system development life cycles (SDLC/Dev Sec Ops ).
• Serve as global technical SME for emerging threats, cryptographic standards, network segmentation, IAM, Zero Trust, and endpoint protections.
• Evaluate the security posture of proposed solutions and provide remediation recommendations.
• Support security incident response and forensic investigations by analyzing architectural weaknesses.
• Collaborate with global and regional cybersecurity teams to ensure consistent implementation of policies, standards, and controls.
• Participate in control design for regulatory compliance programs (e.g., ISO 27001, ISO 21434, NIST CSF, GDPR, NIS2).
• Assess and approve MSSP design proposals and validate alignment with architecture standards.
• Evaluate and manage relationships with security vendors, MSSPs, and third-party assessors to ensure service quality and contract alignment.
• Define and track security architecture KPIs and metrics, providing regular reporting to security leadership and executive stakeholders.

• Bachelor’s degree in information security, computer science, or related technical field required.
• Master's degree preferred.
• 7+ years of experience in cybersecurity architecture or engineering roles, with 3+ years in a dedicated security architecture function required.
• Preferred certifications include CISSP, CISSP-ISSAP, SABSA, TOGAF, or equivalent cloud security architect credentials (AWS/Azure Security Specialty).
• Proven experience designing security architectures in complex enterprise environments, ideally in manufacturing or supply chain sectors.
• Deep technical knowledge of cloud (AWS, Azure, GCP), identity and access management, secure networking, endpoint protection, and encryption.
• Experience integrating security in Agile and Dev Ops environments, with working knowledge of SAST, DAST, and CI/CD security tooling.
• Familiarity with security requirements in OT/ICS environments and their intersection with enterprise IT.
• Strong understanding of Zero Trust principles, network segmentation, PKI, and federation protocols (SAML, OIDC, OAuth2).
• Experience in developing threat models, conducting architectural risk assessments, and managing technical risk.
• Excellent written and verbal communication skills with ability to translate complex security concepts to non-technical audiences.
• Experience working across regions and functions to ensure security is embedded in global operations.