Enterprise Information Security Architect

Fisher Investments; Plano (TX); On-site; USD 180,000 - 250,000; Full time

Benefits offered by this job

100% paid medical premiums

401(k) match

PTO + holidays

Family support programs

Job summary

Fisher Investments is seeking an Enterprise Information Security Architect to shape security across a growing global organization. You will define security direction, influence tech investments, and translate business and regulatory needs into scalable architecture.

You will lead security architecture engagements across cloud, applications, infrastructure, identity, data, networks, and third‑party services, partnering with senior leaders to embed security early in the lifecycle.

Qualifications

• Extensive experience designing enterprise security architectures in regulated environments.
• Proven ability to translate regulatory needs into secure architectures and roadmaps.
• Experience threat modeling, risk assessments, and security design documentation.
• Hands-on guidance across cloud, on-prem, and hybrid platforms.

Responsibilities

• Define enterprise security architecture strategy, target state, and multi-year roadmaps.
• Lead architecture engagements across cloud, apps, infra, and identity.
• Review designs, data flows, and trust boundaries; perform risk analysis.
• Develop reference architectures and reusable design patterns.

Skills

Security architecture

Threat modeling

Cloud security

Identity management

Regulatory compliance

Risk assessment

Cross-domain security

Education

Bachelor's degree in IT/CS/Engineering

Certifications such as CISSP/ISSAP/TOGAF

Tools

Azure

Okta

SailPoint

SIEM

Job description

The Opportunity:

We are looking for an Enterprise Information Security Architect to help shape the future of security across a growing global organization. In this highly visible individual contributor role, you will define enterprise security direction, influence strategic technology investments, and translate complex business and regulatory needs into secure, scalable architecture. You will work across cloud, applications, infrastructure, identity, data, networks, security operations, artificial intelligence, and third‑party services. You will partner with senior leaders and delivery teams to move decisions from strategy through implementation. You will strengthen security‑by‑design practices, simplify the technology environment, and build reusable architecture capabilities that support our continued international growth. You will report to the Group Vice President of the team.

The Day-to-Day:

• Define and evolve the enterprise security architecture strategy, principles, target state, and multi‑year roadmaps with our priorities, technology strategy, regulatory obligations, and the evolving threat landscape.
• Lead security architecture engagements for enterprise initiatives across cloud, applications, infrastructure, identity, data, networks, security operations, artificial intelligence, and third‑party services.
• Review solution designs, data flows, integrations, and trust boundaries; perform threat modeling and risk analysis; and translate findings into clear security requirements and practical remediation plans.
• Develop and maintain reference architectures, reusable design patterns, standards, and decision records that enable secure, scalable, and consistent technology delivery.
• Partner with engineering, infrastructure, product, risk, privacy, legal, procurement, and business teams to embed security early in the technology lifecycle and drive requirements through implementation.
• Evaluate security technologies, platforms, and vendors against architectural fit, risk reduction, operational readiness, cost, and long‑term enterprise strategy.
• Provide hands‑on architectural guidance during implementation, validate that you deliver approved designs and controls as intended, and support your resolution of complex technical issues.
• Identify gaps and duplication across the security ecosystem, recommend prioritized improvements, and influence investment decisions that strengthen security maturity and simplify the environment.
• Facilitate architecture decisions and resolve competing priorities among senior stakeholders using structured analysis, clear trade‑offs, and an enterprise‑wide perspective.
• Communicate architecture direction, material risks, exceptions, and recommendations to technical teams and executive stakeholders in clear, actionable language.
• Monitor emerging technologies, attack techniques, and industry practices—including artificial intelligence—and incorporate relevant insights into security strategy, standards, and designs.
• Be the trusted advisor and individual contributor who strengthens architecture practices through mentoring, knowledge sharing, and collaboration across security and technology teams.

Your Qualifications:

• 15+ years of progressive experience in information technology or cybersecurity, including significant experience architecting and delivering enterprise security solutions in highly regulated environments such as financial services or U.S. government organizations.
• Proven track record designing and implementing scalable enterprise security architectures and leading complex, cross‑domain security transformation initiatives.
• Broad expertise across identity and access management, cloud security, network security, application security, data protection, endpoint security, security operations, and third‑party integrations.
• Demonstrated experience developing security principles, reference architectures, reusable patterns, standards, roadmaps, and technical design documentation.
• Strong knowledge of security architecture and risk frameworks, including NIST CSF, NIST 800‑53, ISO 27001, CIS Controls, Zero Trust, and secure‑by‑design principles.
• Experience conducting threat modeling, architecture reviews, risk assessments, and control‑gap analyses, and translating findings into practical remediation plans.
• Hands‑on experience securing cloud, hybrid, and on‑premises environments; we prefer Microsoft Azure expertise, and we find experience with AWS or Google Cloud beneficial.
• We require deep technical knowledge of identity and access management. This includes Microsoft Entra ID, Active Directory, privileged access management, identity governance, federation, and modern authentication. Experience with platforms such as Okta and SailPoint is preferred.
• Working knowledge of modern security technologies is essential. This includes SIEM, EDR/XDR, DLP, vulnerability management, encryption and key management, API security, network segmentation, SASE/SSE, and DevSecOps controls.
• Experience evaluating latest technologies, including artificial intelligence and SaaS platforms, and defining proportionate security requirements for data, identity, integrations, and third‑party services.
• Translate business, regulatory, privacy, and technical requirements into secure, scalable architecture decisions that balance risk, cost, and delivery objectives.
• Experience resolving ambiguity and gaining alignment among senior technical and business stakeholders.
• Experience working with Agile delivery teams and embedding security architecture into the software and technology delivery lifecycle.
• Bachelor's degree in Information Security, Information Technology, Computer Science, Engineering, or a related field, or equivalent practical experience.
• We prefer relevant certifications such as CISSP, ISSAP, CCSP, CISM, CRISC, SABSA, or TOGAF.
• Must be eligible to obtain and maintain a U.S. government Top Secret security clearance, as required for the role.

Why Fisher Investments:

We work for a bigger purpose: bettering the investment universe. We take great pride in our inclusive culture, our learning and development framework customized for every employee, and our Great Place to Work Certification. It's the people that make the Fisher purpose possible, and we invest in them by offering exceptional benefits like:

• 100% paid medical, dental and vision premiums for you and your qualifying dependents
• A 50% 401(k) match, up to the IRS maximum
• 20 days of PTO, plus 10 paid holidays
• Family Support programs including 8 week Paid Primary Caregiver Leave, $10,000 fertility, family forming, and hormonal health assistance, and back‑up child, adult, and elder care
• This is an in‑office role. Based on your role, tenure, and performance eligibility you may have the opportunity to participate in our hybrid work from home program. This program is subject to change.

FISHER INVESTMENTS IS AN EQUAL OPPORTUNITY EMPLOYER