IT Cybersecurity Architect

Gellert Global Group consists of many of the leading North American food importing companies (Atalanta Corporation, Camerican International, Finica, Tipico Cheese Products) and has been involved in importing food products for over 100 years. The combined revenues of GGG exceed $1.7 billion. GGG companies provide strength in sourcing, insurance, finance, logistics, food safety and information technology, and supplies the needs of retailers, distributors, foodservice chains, hotels, cruise lines, and food manufacturers alike.

Summary/Objective:
The IT Cybersecurity Architect is a strategic and operational leader responsible for protecting the organization’s information assets and advancing enterprise-wide cybersecurity capabilities. This role oversees the identification, prioritization, and resolution of security threats, while driving governance, risk management, and data protection initiatives across Gellert Global Group.

As a key leader within the IT Infrastructure and Security organization, this position supports global business and ensures a resilient, scalable, and proactive security posture. The Cybersecurity Architect partners closely with IT, business stakeholders, and external service providers to strengthen prevention, detection, and response capabilities while aligning cybersecurity strategy with organizational objectives.
The ideal candidate brings strong leadership experience, deep technical expertise in network and endpoint security, and a proven ability to build and mature cybersecurity programs in a complex, multi-location environment.

Responsibilities:

• Leadership & Strategy:
  • Lead the organization’s cybersecurity program, including threat management, risk mitigation, and security operations.
  • Define and execute cybersecurity strategy aligned with business priorities, regulatory requirements, and industry best practices.
  • Oversee governance, assurance, and data loss prevention (DLP) initiatives across the enterprise.
  • Manage and develop internal cybersecurity talent while coordinating offshore and managed service providers.
• Security Operations & Incident Response:
  • Oversee the monitoring, triage, and resolution of security alerts and incidents to minimize business impact.
  • Lead incident response activities, including escalation management, root cause analysis, and remediation.
  • Ensure 24/7 readiness through effective coordination with managed security service providers.
  • Develop and maintain incident response playbooks and lead tabletop exercises.
• Risk Management & Continuous Improvement
  • Identify and assess cybersecurity risks and implement proactive controls to reduce exposure.
  • Drive continuous improvement of security processes, runbooks, and documentation.
  • Lead vulnerability management, penetration testing, and remediation efforts.
  • Champion adoption of new security technologies and automation to enhance coverage and efficiency.
• Collaboration & Communication
  • Partner with IT teams, business units, and executive leadership to promote a strong security culture.
  • Communicate security risks, incidents, and program progress clearly to stakeholders.
  • Support user awareness and training initiatives to strengthen organizational cybersecurity readiness.
  • Collaborate on enterprise-wide initiatives, including cloud, infrastructure, and application security.

Skills and Qualifications:

• Bachelor’s degree in Cybersecurity, Information Technology, or related field (or equivalent experience).
• 7+ years of experience in IT Cybersecurity, with progressive responsibility and function lead experience preferred.
• Proven experience managing or mentoring cybersecurity teams and working with external service providers.
• Strong hands-on experience with security technologies, including:
  • Identity and access management (MFA, Security Key, Entra ID or equivalent)
  • Endpoint detection and response (EDR/EPP)
  • Security awareness platforms (e.g., KnowBe4)
  • SIEM/SOAR solutions (e.g., Splunk)
  • Vulnerability management tools (e.g., Rapid7)
  • Email security gateways (e.g., Proofpoint)
  • Patch management solutions (e.g., ConnectWise)
  • Password Management (e.g., Bitwarden)
  • Microsoft Defender security suite or similar platforms.
  • Microsoft Purview and DLP
  • Microsoft Agent365
• Solid understanding of cloud and infrastructure environments (Azure, AWS, Cisco, Microsoft ecosystem, etc.).
• Strong knowledge of networking concepts and protocols (AD, DNS, LDAP, SMTP, FTP, et