Director, Enterprise Security Architecture

Kids for the Future; Columbia (MD); On-site; USD 170,000 - 190,000; Full time

Benefits offered by this job

Bonus potential up to 15%

Job summary

CRISP Shared Services, Inc. in Maryland is seeking a Director of Enterprise Security Design to define and advance the enterprise security architecture strategy. You will act as a trusted advisor to executives, embedding security into business and technology initiatives across the organization.

You will lead risk assessments, maturity initiatives, and cross-functional programs while shaping standards, guardrails, and security investments to strengthen the company's security posture and resilience.

Qualifications

• 10+ years of progressive cybersecurity experience.
• 5+ years leading enterprise security architecture, security engineering, or cybersecurity programs.
• Experience securing hybrid environments across cloud, on-premises, and SaaS ecosystems.
• Experience developing enterprise security strategies and roadmaps.
• Experience influencing executive stakeholders and presenting risk-based recommendations.
• Experience leading cross-functional initiatives without direct authority.
• Experience overseeing penetration testing and remediation programs.
• Experience supporting compliance frameworks such as SOC 2, ISO 27001, NIST CSF, HIPAA, PCI-DSS, or similar.

Responsibilities

• Develop and maintain the enterprise security architecture roadmap aligned with business objectives.
• Establish and drive the organization's security-by-design framework across infrastructure, cloud, applications, and data.
• Influence technology strategy and ensure security requirements are embedded in enterprise architecture decisions.
• Lead long-term cybersecurity maturity initiatives and continuous improvement programs.
• Present security risks, recommendations, and investment priorities to executive leadership.
• Translate business objectives into security capabilities and controls.
• Define security standards, reference architectures, and engineering guardrails.
• Provide strategic leadership for enterprise security transformation initiatives.
• Serve as the primary security advisor to technology and business leaders.
• Lead security risk reviews for strategic initiatives, acquisitions, and major technology implementations.
• Develop security metrics, KPIs, and risk dashboards for internal and external reporting.
• Participate in enterprise governance committees and technology review boards.
• Drive remediation priorities based on business risk and organizational objectives.
• Analyze outputs from security tools and coordinate remediation across teams.
• Perform security risk assessments for change requests and new initiatives.
• Lead a risk-based vulnerability management program including results from vulnerability scanners, secure code scan, and from security advisories.
• Identify risks and develop incident response procedures.
• Support and enhance security technologies (e.g. SIEM, EDR, NDR, IDPS, vulnerability scanner, security lake).
• Investigate security incidents and produce reports with root cause and corrective actions.
• Track emerging threats and recommend security improvements.

Education

CISSP

Azure Security Engineer (AZ-500)

Certified Incident Handler (GCIH)

Job description

CRISP Shared Services, Inc. in Maryland is seeking a Director of Enterprise Security Design to define and advance the enterprise security architecture strategy. You will act as a trusted advisor to executives, embedding security into business and technology initiatives across the organization.

You will lead risk assessments, maturity initiatives, and cross-functional programs while shaping standards, guardrails, and security investments to strengthen the company's security posture and resilience.