PRO; Entreprise Architect - Cyber

Position: (PRO) - Entreprise Architect - Cyber
Principal Cybersecurity & GRC Advisor About Highspring Highspring is a next-generation consulting and professional services firm. We deliver modern, agile, and forward-thinking solutions to clients across North America. We work with leading organizations to help them address complex technology challenges, strengthen their capabilities, and deliver meaningful business impact.

At Highspring, we believe in empowering our people, fostering technical leadership, and creating opportunities for our consultants to contribute where their expertise matters most.

The Opportunity Highspring is looking for a Principal Cybersecurity & GRC Advisor to support a large-scale organization operating in a complex, highly regulated technology  this role, you will serve as a trusted cybersecurity expert and strategic advisor to technology, business, and leadership teams. You will help align business objectives, security requirements, regulatory obligations, and risk priorities to guide technology decisions and protect critical organizational assets.

This is an individual contributor role that requires leadership through influence rather than direct people management. You will collaborate across a highly matrixed environment, advising managers, architects, technology teams, and project leaders to ensure decisions are secure, practical, and aligned with business priorities.

What You’ll DoAct as a lead cybersecurity expert across strategic technology domains.

Bridge business requirements, cybersecurity needs, regulatory obligations, and organizational risk priorities.

Provide pragmatic recommendations that balance security requirements with operational realities.

Evaluate and approve cybersecurity risk assessments, technology architectures, and risk mitigation strategies.

Contribute to the evolution of cybersecurity standards, policies, and governance frameworks.

Participate in architecture, governance, and risk management committees.

Advise business and technology teams on information security and cybersecurity best practices.

Support technology transformation, modernization, and innovation initiatives.

Monitor emerging cyber threats, evolving regulations, and relevant industry trends.

Build alignment among stakeholders across complex initiatives without relying on direct authority.

What You Bring to the Table Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related field.
15 years of experience in information security or cybersecurity.

Proven experience working in large-scale, complex technology environments.

Strong understanding of cybersecurity risk management, security governance, and enterprise architecture.

Hands-on experience conducting cybersecurity risk assessments and managing technology risk.

Ability to communicate effectively with both highly technical teams and business leaders.

Strong judgment and the ability to provide clear recommendations in complex or ambiguous situations.

Excellent communication, negotiation, and stakeholder engagement skills.

Ability to build trusted relationships and influence decisions across a matrixed organization.

Core Skills Required Cybersecurity governance, risk, and compliance (GRC)
Cybersecurity risk assessment and risk management

Information security governance

Enterprise architecture and technology risk Security policies, standards, and governance frameworks

Stakeholder management and executive-level advisory

Technology transformation and modernization

Regulatory and security requirements

Cross-functional leadership and influencing without direct authority

Preferred qualifications and experience:

CISSP, CISM, CISA, or equivalent cybersecurity certification.

Experience in regulated industries such as aerospace, defense, critical infrastructure, or…