Director of Enterprise Security Design

Dexian; Columbia (MD); On-site; USD 180,000 - 260,000; Full time

Job summary

Dexian is seeking a Director of Enterprise Security Architecture & Design to define and execute a comprehensive enterprise security strategy. You will embed security principles across business and technology initiatives and advise executives on risk, investments, and architecture standards.

The role leads security transformation initiatives, drives remediation prioritization, and ensures governance across on‑premises, cloud, and SaaS environments.

Qualifications

• 10+ years of progressive cybersecurity experience.
• 5+ years leading security architecture or enterprise cybersecurity programs.
• Experience securing complex environments (on‑prem, cloud, SaaS).
• Experience developing enterprise security strategies, roadmaps, governance.
• Proven ability to influence executive stakeholders and communicate risk.
• Experience leading cross‑functional initiatives in matrixed orgs.
• Experience managing penetration testing and vulnerability remediation programs.
• Experience with regulatory, compliance, or security frameworks (NIST, ISO 27001, SOC 2, PCI-DSS, HIPAA).

Responsibilities

• Define and execute enterprise security architecture strategy.
• Promote security-by-design across infrastructure, cloud, data environments.
• Lead security standards, reference architectures, and guardrails.
• Translate business needs into scalable security capabilities.
• Advise executives on risk, investments, and security initiatives.
• Lead enterprise-wide security transformation efforts.
• Govern remediation prioritization based on risk and impact.
• Present security plans and risks to senior leadership.

Skills

Executive stakeholder comms

Security architecture leadership

Cross-functional collaboration

Threat modeling

Regulatory frameworks knowledge

Education

Bachelor's degree

Master's degree preferred

Tools

Azure Defender & Sentinel

Entra ID (Azure AD)

Purview

NIST/ISO frameworks

Job description

Director, Enterprise Security Architecture & Design

Position Summary

The Director, Enterprise Security Architecture & Design is responsible for defining and executing the organization's enterprise security architecture strategy, ensuring security principles are embedded across business and technology initiatives. This leader acts as a trusted advisor to executive stakeholders, driving security-by-design practices, establishing architecture standards, and leading cross-functional efforts to identify, assess, and mitigate cybersecurity risk.

This role maintains a forward-looking perspective on emerging threats, evolving technologies, regulatory requirements, and business objectives to strengthen organizational security posture, resilience, and operational effectiveness.

Key Responsibilities

Security Strategy & Architecture

• Develop and maintain the enterprise security architecture roadmap aligned to business and technology objectives.
• Establish and promote security-by-design principles across infrastructure, applications, cloud platforms, and data environments.
• Define enterprise security standards, reference architectures, and engineering guardrails.
• Translate business requirements into scalable security capabilities and controls.
• Influence enterprise technology decisions to ensure security considerations are integrated into architectural planning and implementation.
• Lead long-term cybersecurity maturity and transformation initiatives.
• Serve as a strategic advisor to executive leadership on cybersecurity risk, security investments, and technology initiatives.
• Present security strategies, key risks, mitigation plans, and investment recommendations to senior stakeholders.
• Participate in governance committees, architecture review boards, and risk management forums.
• Provide leadership for enterprise-wide security transformation efforts.
• Drive prioritization of remediation activities based on organizational risk and business impact.

Risk Management & Security Operations

• Lead security risk assessments for technology initiatives, change requests, and strategic programs.
• Evaluate cybersecurity risks associated with major technology implementations, digital transformation initiatives, and business changes.
• Establish and oversee risk-based vulnerability management practices.
• Partner with engineering and operational teams to remediate identified vulnerabilities and security weaknesses.
• Conduct threat and risk assessments to identify emerging concerns and control gaps.

Security Monitoring & Incident Response

• Support and optimize enterprise security technologies, including SIEM, endpoint protection, identity security, network security, vulnerability management, and detection platforms.
• Analyze outputs from security monitoring and assessment tools and coordinate remediation activities.
• Lead or support incident investigations, root cause analyses, and corrective action planning.
• Develop and maintain incident response strategies and playbooks.
• Monitor emerging threats and recommend appropriate security enhancements.

Metrics & Reporting

• Develop security KPIs, operational metrics, and executive dashboards.
• Establish meaningful reporting mechanisms to measure program effectiveness, risk reduction, and cybersecurity maturity.
• Communicate security performance and risk posture to business and technology leadership.

Required Qualifications

Experience

• 10+ years of progressive cybersecurity experience.
• 5+ years leading security architecture, security engineering, or enterprise cybersecurity programs.
• Experience securing complex environments spanning on-premises, cloud, and SaaS platforms.
• Experience developing enterprise security strategies, roadmaps, and governance frameworks.
• Proven ability to influence executive stakeholders and communicate risk-based recommendations.
• Experience leading cross-functional initiatives within matrixed organizations.
• Experience managing penetration testing and vulnerability remediation programs.
• Experience supporting regulatory, compliance, or security frameworks such as NIST, ISO 27001, SOC 2, PCI-DSS, HIPAA, or comparable standards.

Preferred Experience

• Zero Trust architecture design and implementation.
• Microsoft security ecosystem, including Defender, Sentinel, Entra ID, and Purview.
• Cloud security experience in Azure and/or AWS.
• Enterprise threat modeling and risk assessment methodologies.
• Leadership during significant cybersecurity incidents.
• Large-scale technology transformation initiatives.
• Security architecture within highly regulated industries.
• Familiarity with AI governance, security, and risk considerations.

Certifications

Required

• CISSP
• Azure Security Engineer (AZ-500)
• GIAC Certified Incident Handler (GCIH)

Preferred

• CCSP
• SABSA
• TOGAF
• AWS Security Specialty
• Additional GIAC certifications

Education

• Bachelor's Degree required.
• Master's Degree preferred.

Dexian stands at the forefront of Talent + Technology solutions with a presence spanning more than 70 locations worldwide and a team exceeding 10,000 professionals. As one of the largest technology and professional staffing companies and one of the largest minority-owned staffing companies in the United States, Dexian combines over 30 years of industry expertise with cutting-edge technologies to deliver comprehensive global services and support.

Dexian connects the right talent and the right technology with the right organizations to deliver trajectory-changing results that help everyone achieve their ambitions and goals. To learn more, please visit https://dexian.com/.

Dexian is an Equal Opportunity Employer that recruits and hires qualified candidates without regard to race, religion, sex, sexual orientation, gender identity, age, national origin, ancestry, citizenship, disability, or veteran status.