Senior Director, Cybersecurity- Architecture

Job Description Summary:

The Senior Director, Cybersecurity Architecture serves as the senior-most cybersecurity architect in the enterprise, responsible for defining and driving the cybersecurity architecture vision, standards, and patterns that enable secure adoption of artificial intelligence, advanced analytics, cloud platforms, data-driven innovation, and modernized operational technology across a global, regulated business. 

This strategic technical leadership role bridges business strategy with technical execution, ensuring that security is embedded by design into the company's most critical transformations — including generative AI platforms, enterprise data ecosystems, multi-cloud migrations, Zero Trust initiatives, and digital and connected-health solutions. The role leads a team of specialized security architects, partners with Enterprise Architecture and business technology leaders, and serves as the authoritative voice on security architecture across the organization. 

The role demands deep technical expertise in modern cloud-native architectures, AI/ML security, data protection, identity, and Zero Trust principles, combined with the business acumen to translate complex security concepts into enabling strategies that accelerate innovation while managing risk in a highly regulated industry. 

Cybersecurity Domain Scope:

The Senior Director, Cybersecurity Architecture owns the security architecture across the following domains, setting direction for the architects and engineers who deliver in each area: 

• Enterprise AI & Data Security — generative AI, machine learning platforms, LLMOps/MLOps, model governance, training-data protection, prompt injection prevention, AI agent security, enterprise data lakes, data mesh, and analytics platforms. 

• Cloud Security — multi-cloud (AWS, Azure, GCP) and hybrid patterns, secure landing zones, Infrastructure-as-Code, DevSecOps pipelines, container and serverless workloads, SaaS, and API security. 

• Zero Trust & Identity — Zero Trust Architecture aligned to NIST SP 800-207, enterprise identity fabric, privileged and non-human identity governance, passwordless and phishing-resistant MFA, ZTNA, and SASE. 

• OT & Manufacturing Security — architectures aligned to the Purdue Model (ISA-95) and IEC 62443, industrial DMZ, OT/IT convergence, MES, SCADA, historians, PLCs/HMIs, and secure remote vendor access. 

• Architecture Governance — Security Architecture Review Board (SARB), reference architectures, design patterns, threat modeling, and exception management aligned to NIST CSF, ISO 27001, and CIS. 

• Regulatory Context — GxP, 21 CFR Part 11, EU Annex 11, ALCOA+, GDPR, HIPAA, and FDA cybersecurity guidance integrated into all architecture decisions. 

Typical Accountabilities:

Architecture Strategy, Direction & Standards 

• Define the architecture strategy, direction, and standards pertinent for the cybersecurity architecture segment. 

• Analyze and translate business priorities and strategies into architecture requirements for the enterprise. 

• Act as an authority to the architecture community and the business regarding strategic architecture decisions for the cybersecurity segment. 

• Drive, review, approve, and oversee development and deployment of cybersecurity architecture roadmaps and blueprints (1–5 year horizon) as well as solution and