Cybersecurity Architect

Job Purpose and Function

The Cybersecurity Architect plays a critical role in protecting the Wills Group organization and serves as the primary point of contact and subject matter expert of enterprise cybersecurity initiatives. This role is responsible for driving the planning, design, implementation, operational management, and continuous improvement of the organization’s cybersecurity program and security architecture.

The Cybersecurity Architect functions as the lead technical security resource responsible for advancing cybersecurity maturity across the enterprise through security control design, operational improvements, governance leadership, risk reduction initiatives, and strategic technology recommendations.

This role is responsible for evaluating, recommending, designing, implementing, and maintaining enterprise security technologies, standards and security controls across infrastructure, endpoint, identity, cloud, network, and operational environments. The Cybersecurity Architect serves as the primary escalation point and technical advisor for cybersecurity operations, vulnerability remediation, security governance, compliance initiatives, and incident response coordination.

The Cybersecurity Architect independently leads security initiatives involving:

• Vulnerability management strategy and remediation
• Security monitoring and MDR operational coordination
• Penetration testing scope and remediation management
• PCI compliance and governance initiatives
• Security awareness and organizational training
• Vendor and security technology evaluations
• Security roadmap development and operational maturity improvements
• Security standards, baselines, and architectural recommendations

This role requires balancing organizational risk, operational requirements, implementation feasibility, and budget considerations while providing strategic security recommendations to IT leadership and executive stakeholders.

The Cybersecurity Architect will proactively lead efforts surrounding:

• PCI DSS compliance initiatives
• Cybersecurity audits
• Network and infrastructure security improvements
• Cybersecurity insurance reviews
• External penetration testing coordination
• Disaster recovery and tabletop exercises
• Governance, Risk, and Compliance (GRC) initiatives

The Cybersecurity Architect is expected to operate both strategically and operationally within our IT department and will serve as the primary driver for advancing the organization’s cybersecurity initiatives and security posture.

• Design and implement enterprise security solutions and security control frameworks across cloud, endpoint, identity, network, and infrastructure environments.
• Develop security standards, technical baselines, architectural recommendations, and security best practices for enterprise systems and operations.
• Evaluate, recommend, and lead implementation of cybersecurity technologies, vendor solutions, and operational security improvements.
• Drive security maturity improvements through continuous enhancement of tools, processes, monitoring capabilities, and operational controls.
• Develop remediation strategies and lead vulnerability reduction initiatives across the organization.
• Reviews current architectures and systems to ensure consistency and compliance with the organization's guidelines, policies, and standards.
• Defines and develops security requirements using risk assessments, threat modeling, testing, and analysis of existing systems.

• Creates action plans for policy creation and governance, system hardening, monitoring, incident response, disaster recovery, and emerging cybersecurity threats.
• Utilizes security information and event management (SEIM), data loss prevention (DLP), intrusion prevention systems (IPS), and other tools in action plan designs.
• Manage vendors to monitor and detect anomalous or malicious activity within the environment and coordinate incident response and remediation activities as necessary.
• Partner with Infrastructure, Field Services, NOC, SOC, MDR, and Managed Service Providers to improve threat monitoring, escalation…