Enterprise Cybersecurity Architect

Southern-Glazer-S-Wine-; Dallas (TX); On-site; USD 150,000 - 210,000; Full time

Benefits offered by this job

Medical and prescription coverage

Dental and vision plans

401(k) plan

Tuition assistance

Wellness program

Paid vacation & sick leave

Job summary

Southern Glazer's is seeking an Enterprise Cybersecurity Architect to lead the organization’s security architecture program, translating threat intelligence and business priorities into secure roadmaps and reference architectures. The role acts as a senior technical authority, shaping standards and patterns across identity, cloud, data, and applications while driving secure engineering practices.

The ideal candidate has deep experience with modern security architecture, risk-based decisioning,

Qualifications

• Expert knowledge of cybersecurity architecture frameworks, control frameworks, and security standards such as NIST CSF, NIST 800-53, ISO 27001, CIS Controls, SABSA, zero trust, secure SDLC, threat modeling, and risk-based architecture decisioning.
• Expert knowledge of modern security architecture patterns across AWS cloud services, SaaS, IaaS, PaaS, microservices, APIs, identity and access management, privileged access, encryption, key management, secrets management, event-driven architecture, data protection, and security analytics; relevant certifications may include CISSP, CCSP, CISM, SABSA, TOGAF, AWS/Azure security certifications, or similar credentials.
• Expert knowledge of business, operating, risk, and financial models

Responsibilities

• Lead the development of enterprise cybersecurity architecture vision and technology direction, connecting business strategy, cyber risk priorities, and security capabilities through actionable architecture roadmaps and guiding principles.
• Shape and maintain the cybersecurity architecture roadmap across identity, infrastructure, cloud, applications, data, network, endpoint, third-party, and operational technology domains; coordinate investment plans, interdependencies, and enterprise priorities.
• Serve as a senior security design authority for the most complex, high-risk, cross-portfolio solutions; lead cybersecurity architecture governance; ensure adherence to roadmaps, standards, policies, and control requirements.
• Establish and maintain authoritative security design patterns, reference architectures, control patterns, and cybersecurity architecture standards to drive consistent adoption across the enterprise.
• Define security architecture guidance for emerging technologies, including AI and Generative AI, with attention to data protection, access controls, model risk, responsible AI practices, and secure lifecycle standards.
• Assess external cyber threat trends, regulatory expectations, and security technology forces; author executive position papers that identify strategic cyber risks, opportunities, and required investments.
• Ensure vendor, platform, and security technology selections align with enterprise cybersecurity strategy, risk appetite, control objectives, and long-term direction.
• Drive security-by-design, zero-trust, least privilege, defense-in-depth, segmentation, secure configuration, data protection, and resilience principles across the technology portfolio.
• Partner with security operations, risk management, infrastructure, engineering, application, data, privacy, and compliance teams to ensure architectures support threat detection, incident response, disaster recovery, vulnerability management, and regulatory obligations.
• Prioritize remediation of architectural security debt, legacy risk, and systemic control gaps; define measurable outcomes that reduce likelihood and impact of cybersecurity events.
• Set and reinforce the enterprise security architecture quality bar by establishing expectations for secure engineering, operational readiness, logging, monitoring, resilience, and incident response integration.
• Expand cybersecurity architecture capacity by mentoring architects and engineers, delegating to qualified security architecture leaders, and championing a security-first architecture culture across SGWS

Skills

Cybersecurity architecture

NIST CSF

ISO 27001

CIS Controls

Zero trust

Threat modelling

AWS cloud

IAM

Job description

Select how often (in days) to receive an alert:

Job Title: Enterprise Cybersecurity Architect

Job ID: 41815

Location: Dallas, TX, US, 75254

What You Need To Know

Shape a remarkable future with us. Build a career working for an industry leader that truly invests in their people - and equips them with leading technology, continuous learning, and the ability to bring their best selves to work. As the premier wine and spirits distributor, Southern Glazer's isn't just one of Forbes’ Top Private Companies; it's a family-owned business with deep roots dating back to 1933.

The reputation of Southern Glazer's is well-established, and it's no surprise that we are regularly recognized for our culture. Southern Glazer's has been recognized by Newsweek as one of America's Greatest Workplaces for Inclusion and Diversity, as well as for Women and Parents and Families. These accolades speak volumes about our commitment to creating a supportive and inclusive culture of belonging for all employees.

As a full-time employee, you can choose from a wide-ranging menu of our Top Shelf Benefits,

• comprehensive medical and prescription drug coverage
• dental and vision plans
• tax-saving Flexible Spending Accounts
• disability coverage
• life insurance plans
• a 401(k) plan

We also offer

• tuition assistance
• a wellness program
• parental leave
• vacation accrual
• paid sick leave
• and more.

By joining Southern Glazer's, you would be part of a team that values excellence, innovation, and community. This is more than just a job - it's an opportunity to build the future of beverage distribution and grow with a company that truly cares about its people.

Overview

The Enterprise Cybersecurity Architect acts as a strategic cybersecurity leader, guiding the organization’s security architecture, cyber risk reduction, and secure technology transformation initiatives. In this role, the Enterprise Cybersecurity Architect provides expert guidance on applying existing, new, and emerging security technologies and architecture practices to protect enterprise assets, enable secure business growth, and strengthen the organization’s cyber resilience. This role operates as a senior individual contributor and enterprise technical authority, influencing strategy, standards, and architecture direction through expertise, governance, and cross-functional leadership rather than direct people management. This role leads the cybersecurity architecture function, translating threat intelligence, regulatory expectations, business priorities, and enterprise technology strategy into security roadmaps, reference architectures, standards, and design patterns. The Enterprise Cybersecurity Architect ensures that solutions are secure by design, resilient, scalable, maintainable, and aligned to the organization’s long-term cybersecurity and business objectives.

Primary Responsibilities

• Lead the development of enterprise cybersecurity architecture vision and technology direction, connecting business strategy, cyber risk priorities, and security capabilities through actionable architecture roadmaps and guiding principles.
• Shape and maintain the cybersecurity architecture roadmap across identity, infrastructure, cloud, applications, data, network, endpoint, third-party, and operational technology domains; coordinate investment plans, interdependencies, and enterprise priorities.
• Serve as a senior security design authority for the most complex, high-risk, cross-portfolio solutions; lead cybersecurity architecture governance; and ensure adherence to security roadmaps, standards, policies, and control requirements.
• Establish and maintain authoritative security design patterns, reference architectures, control patterns, and cybersecurity architecture standards to drive consistent adoption across the enterprise.
• Define security architecture guidance for emerging technologies, including AI and Generative AI, with attention to data protection, access controls, model risk, responsible AI practices, and secure lifecycle standards.
• Assess external cyber threat trends, emerging attack techniques, regulatory expectations, and security technology forces; author executive position papers that identify strategic cyber risks, opportunities, and required investments.
• Ensure vendor, platform, and security technology selections align with enterprise cybersecurity strategy, risk appetite, control objectives, and long-term architecture direction.
• Drive security-by-design, zero-trust, least privilege, defense-in-depth, segmentation, secure configuration, data protection, and resilience principles across the technology portfolio.
• Partner with security operations, risk management, infrastructure, engineering, application, data, privacy, and compliance teams to ensure architectures support threat detection, incident response, disaster recovery, vulnerability management, and regulatory obligations.
• Prioritize remediation of architectural security debt, legacy risk, and systemic control gaps; define measurable outcomes that reduce likelihood and impact of cybersecurity events.
• Set and reinforce the enterprise security architecture quality bar by establishing expectations for secure engineering, operational readiness, logging, monitoring, resilience, and incident response integration.
• Expand cybersecurity architecture capacity by mentoring architects and engineers, delegating to qualified security architecture leaders, and championing a security-first architecture culture and common language across SGWS.

Preferred Qualifications

• Expert knowledge of cybersecurity architecture frameworks, control frameworks, and security standards such as NIST CSF, NIST 800-53, ISO 27001, CIS Controls, SABSA, zero trust, secure SDLC, threat modeling, and risk-based architecture decisioning.
• Expert knowledge of modern security architecture patterns across AWS cloud services, SaaS, IaaS, PaaS, microservices, APIs, identity and access management, privileged access, encryption, key management, secrets management, event-driven architecture, data protection, and security analytics;relevant certifications may include CISSP, CCSP, CISM, SABSA, TOGAF, AWS/Azure security certifications, or similar credentials.
• Expert knowledge of business, operating, risk, and financial models