Director, Security Architecture & Engagement

KellyMitchell Group; Burbank (CA); Hybrid; USD 96,000 - 138,000; Full time

Benefits offered by this job

Medical, Dental, & Vision Insurance

Employee Stock Ownership Plan

401K offered

Job summary

KellyMitchell is seeking a Director of Security Architecture and Engagement to lead a team of security architects and engineers. You will drive secure-by-design initiatives, translate complex requirements for executives, and enable innovative capabilities with risk-based decisions.

The role emphasizes business enablement and collaboration with Strategy, Engineering, and Architecture leaders across the enterprise. Expect hybrid work and a focus on secure development practices with global teams.

Qualifications

• Bachelor’s degree in Cybersecurity or related field required.
• 10+ years in a tech org with DevOps and security experience.
• Trusted advisor to business/tech stakeholders with hands-on architecture.
• Experience in ISMS and frameworks like NIST 800-53, CIS Benchmarks, ISO 27001.
• Strong cloud (AWS/Azure/GCP) and security architecture expertise.

Responsibilities

• Serve as primary cybersecurity advisor to business, technology, product, and engineering leaders.
• Build trusted stakeholder relationships with practical security guidance.
• Translate complex security requirements into clear recommendations for technical and exec audiences.
• Facilitate conversations between business teams, architects, engineers, compliance, and security stakeholders.
• Lead security engagement with vendors and oversee onboarding and reviews.
• Develop security architectures and reference models across platforms.

Skills

Security Architecture

Threat Modeling

Cloud Security

ISMS Knowledge

Stakeholder Engagement

Leadership

DevSecOps

Vulnerability Management

Communication

Executive Communication

Education

Bachelor's degree in Cybersecurity

Tools

Terraform

Kubernetes

Job description

Job Summary

Our client, a leading media & entertainment company, is seeking a Director - Security Architecture and Engagement to lead a team of security architects and engineers while personally driving the relationships that make secure-by-design possible: helping stakeholders understand requirements, navigate security processes, remove barriers, and make informed risk-based decisions. This is not primarily a compliance-enforcement role. It is a business-enablement role: the Director succeeds by building trust with stakeholders, simplifying cybersecurity complexity, and helping teams deliver innovative capabilities securely and efficiently, while staying close enough to the architecture and engineering work to remain credible with the technologists doing it. You’ll partner with peer Directors across Strategy, Engineering and Architecture and with technology and business leaders across the enterprise to make sure new solutions are secure by design, not bolted on after the fact. This position is W-2 only. We do not work with third-party firms or C2C arrangements for this role.

Core Responsibilities

• Serve as a primary cybersecurity advisor to business, technology, product, and engineering leaders across the enterprise
• Build trusted relationships with stakeholders by providing practical, business-focused security guidance rather than one-size-fits-all mandates
• Translate complex security and architecture requirements into clear, actionable recommendations for both technical and executive audiences
• Facilitate productive conversations between business teams, architects, engineers, compliance partners, and security stakeholders
• Help teams understand security expectations early in planning and delivery, so security is a design input rather than a late-stage gate
• Collaborate with business and technology leaders to understand their strategies, objectives, and roadmaps, and align cybersecurity architecture to those priorities
• Enable project teams to navigate cybersecurity review and governance processes efficiently; identify viable paths forward when security concerns arise rather than simply blocking them
• Educate stakeholders on security standards, approved patterns, and secure implementation approaches; promote self-service knowledge and repeatable patterns that reduce friction
• Drive a positive customer experience for teams engaging with GIS and SEA services and identify opportunities to streamline reviews and reduce organizational risk
• Lead security engagement with strategic vendors and third parties, partnering with procurement, legal, and business teams throughout evaluation and onboarding
• Design complex security frameworks and integrations across people, processes, and technology; define specifications and integration parameters for compatibility across platforms
• Conceive, visualize, and communicate architecture models, strategies, and reference architectures used across multiple products, systems, and teams
• Provide multi-layered technical expertise for next-generation initiatives such as Zero Trust Network Architecture, Data Security, AI Security, Identity and Access Management, and Secure Access
• Lead regular Architecture Engagement Meetings with leadership: establish and maintain architecture standards, design patterns, and prescriptions, and guide evaluation of new technology through research and hands-on lab work
• Ensure the creation and maintenance of security architecture artifacts, including reference architectures, control frameworks, design patterns, standards, and policies, and support governance through control mapping and alignment to frameworks such as NIST 800-53, CIS Benchmarks, and ISO 27001
• Guide advanced risk and threat analysis activities, including threat modeling, architecture risk reviews, and vulnerability assessments, ensuring internal incident trends and external threat intelligence inform architectural decisions and mitigations
• Partner with business-unit Solutions Engineering and Enterprise Architecture teams to integrate DevSecOps and product security practices, shepherding end-to-end security tollgates for application development
• Adopt and evangelize GIS risk index/KPIs to shift the security program from coverage-based to risk-based decision-making
• Work with other architects to optimize cloud infrastructure and deliver secure, cost-effective compute across AWS, Azure, and GCP
• Lead, mentor, and grow a team of security architects and engineers, including partners located outside the U.S.; manage issues and escalations so work keeps flowing efficiently
• Foster a collaborative, service-oriented culture focused on partnership and business enablement rather than gatekeeping
• Provide continuous coaching and feedback and support the career aspirations and well-being of team members, building an accountable, high-performing team
• Track budgets, report status and key decisions to leadership, and ensure deliverables are high quality and clearly documented
• Advise senior leadership on emerging threats, vulnerabilities, and business impact in business language suited to executive audiences

Required Skills/Experience (Must-Haves)

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Software, Electrical or Electronics Engineering, or equivalent work experience
• 10+ years of experience in a technology organization, including at least 3 years in a DevOps function and 2+ years of information security experience supporting a moderate-to-large, federated organization
• Demonstrated experience as a trusted advisor or customer-facing security consultant to business and technology stakeholders, in addition to hands-on architecture experience
• Demonstrated success in one or more of: Application Security/SDLC, Data Security, Penetration Testing, Advanced Threat Detection & Monitoring, Automation & Machine Learning, or Security Operations & Threat Hunting
• Cohesive understanding of Information Security Management Systems (ISMS), including frameworks, principles, controls, capabilities, and platforms, along with strong working knowledge of risk analysis methodologies and control frameworks such as NIST 800-53, CIS Benchmarks, and ISO 27001
• Broad, hands-on experience across business, application, information, infrastructure, identity and access management, networking, and security architecture domains within a large, heterogeneous enterprise environment
• Hands-on familiarity with cloud platforms (AWS, Azure, GCP), infrastructure-as-code (e.g., Terraform), and container orchestration (e.g., Kubernetes)
• Experience managing or leading geographically dispersed technical teams, including internal staff and outsourced/contract resources, with 5+ years in a management or leadership role providing direction through managers and senior individual contributors across multi-disciplinary technical teams
• Excellent communication and relationship-building skills, with a proven ability to translate advanced technical and security topics for technical and non-technical audiences, including senior executives
• Strong analytical and problem-solving skills, with the ability to quantify the business value of security work and balance delivery across multiple projects and demands simultaneously

Preferred Skills/Experience (Nice-to-Haves)

• Industry certification such as CISSP, GCIH, CISM, CISA, CEH, or AWS Certified Security - Specialty/Solutions Architect
• Prior Fortune 100 experience strongly preferred
• In-depth knowledge of the regulatory landscape relevant to a global media and entertainment company (e.g., Sarbanes-Oxley, HIPAA, PCI, GDPR, and other data-privacy regulations)
• Background in advanced cybersecurity testing, adversarial simulations, or penetration testing, and familiarity with system hardening across compute and network platforms
• Experience with CI/CD pipelines, infrastructure-as-code, and security tooling integration across cloud and on-premises environments, and exposure to modern delivery toolchains (e.g., Jenkins, GitLab, Splunk, Vault, Kubernetes) and cloud-native, 12-factor application patterns
• Passion for learning new things, tempered with a bias toward adding real value to the business

Work Environment

Location: Burbank, CA / Seattle, WA / New York, NY / Orlando, FL

HYBRID

Contract: 12 months

Compensation & Benefits

Pay Range: The approximate pay range for this position is between $70.00 and $100.00 per hour. Please note that the pay range provided is a good faith estimate. Final compensation may vary based on factors including but not limited to background, knowledge, skills, and location. We comply with local wage minimums.

• Medical, Dental, & Vision Insurance Plans
• Employee Stock Ownership Plan
• 401K offered

About KellyMitchell

At KellyMitchell, our culture is world class. We're movers and shakers! We don't mind a bit of friendly competition, and we reward hard work with unlimited potential for growth. This is an exciting opportunity to join a company known for innovative solutions and unsurpassed customer service. We're passionate about helping companies solve their biggest IT staffing & project solutions challenges. As an employee-owned, women-led organization serving Fortune 500 companies nationwide, we deliver expert service at a moment's notice.

Marketing Disclosure

By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from KellyMitchell and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy at https://www.careers.kellymitchell.com/privacy-policy [143412]