Global Cybersecurity Architecture & Operations Lead

Culligan International; Northern (KY); Hybrid; USD 140,000 - 180,000; Full time

Job summary

Culligan International in Rosemont, IL is seeking a seasoned cybersecurity leader to own the architecture and day-to-day operation of core security capabilities—SSPM, DSPM, vulnerability management, SIEM, and SOC—across a global environment.

Reporting to the Global CISO, this player-coach role blends strategic influence with hands-on execution, requiring strong cloud security, governance, and collaboration with regional teams.

Qualifications

• 6+ years of hands-on cybersecurity engineering, architecture, or security operations.
• Experience with SSPM and DSPM platforms at scale.
• Proven ownership of an enterprise vulnerability management program.
• Experience administering a SIEM and managing SOC/MSSP relationships.
• Strong knowledge of cloud security across AWS/Azure/GCP and SaaS ecosystems.
• Excellent communication and ability to brief executives.
• Self-starter with initiative.

Responsibilities

• Define and maintain enterprise security architecture across cloud, SaaS, network, and identity domains.
• Deploy and tune SSPM; drive remediation across global SaaS estate.
• Lead DSPM implementation to protect sensitive data and coordinate with privacy/legal.
• Own end-to-end vulnerability management lifecycle with risk-based prioritization.
• Administer SIEM and develop detections; oversee SOC operations and MSSP/MDR partners.
• Strengthen controls and evidence for SOX ITGC audits; conduct security assessments.
• Track threat activity and translate into detections and priorities.
• Mentor analysts and engineers across regions; drive automation.

Skills

Cybersecurity leadership

Vulnerability management

SIEM administration

Cloud security

SaaS security

Threat intelligence

Cross-functional collaboration

Executive communication

Job description

Culligan International in Rosemont, IL is seeking a seasoned cybersecurity leader to own the architecture and day-to-day operation of core security capabilities—SSPM, DSPM, vulnerability management, SIEM, and SOC—across a global environment.

Reporting to the Global CISO, this player-coach role blends strategic influence with hands-on execution, requiring strong cloud security, governance, and collaboration with regional teams.