Senior Security Governance, Risk & Compliance Architect 5660

Tier4 Group; Boston (MA); Hybrid; USD 160,000 - 230,000; Full time

Job summary

Tier4 Group is seeking a Senior Security Governance, Risk & Compliance Architect to lead security strategy for a large-scale cloud HR/payroll modernization initiative. This is a highly visible leadership role responsible for enterprise security frameworks, regulatory compliance, risk mitigation, and guiding security architecture across a complex SaaS environment.

You will drive governance of IAM, SSO, MFA, PAM, SIEM, DLP, and encryption, while partnering with executives and vendors to ensure

Qualifications

• 10+ years in security architecture or GRC leadership roles.
• Proven experience designing security programs for large enterprise SaaS.
• Deep expertise with IAM, SSO, MFA, PAM, SIEM, and DLP.
• Strong knowledge of NIST, ISO 27001, COBIT, SOX, ITIL.
• Experience leading risk assessments, audits, and remediation.

Responsibilities

• Lead enterprise security governance, risk, compliance, and architecture initiatives.
• Design and implement security controls for cloud apps, data conversion, and integrations.
• Establish security policies, access controls, provisioning, and governance standards.
• Oversee IAM, SSO, MFA, PAM, SIEM, DLP, encryption, and vulnerability programs.
• Conduct risk assessments, compliance reviews, and audit remediation.
• Drive disaster recovery, business continuity, incident response, and ops readiness.
• Partner with executives, tech teams, and vendors to embed security requirements.
• Oversee vendor security, SLAs, and risk mitigation strategies.
• Advise on AI governance and emerging security threats.

Skills

Security architecture

Governance & GRC

IAM

SSO

MFA

PAM

SIEM

DLP

Cloud security

Executive communication

Tools

Workday Security

Workday Prism

Snowflake Security

Azure AD

Microsoft Identity

Job description

Senior Security Governance, Risk & Compliance Architect 5660

Hybrid | 18-24+ Month Contract

Tier4 Group is seeking a Senior Security Governance, Risk & Compliance Architect to lead security strategy, governance, compliance, and risk management for a large-scale cloud-based HR and Payroll modernization initiative. This is a highly visible leadership role responsible for establishing enterprise security frameworks, ensuring regulatory compliance, mitigating risk, and guiding security architecture across a complex SaaS environment.

What You'll Do

• Lead enterprise security governance, risk management, compliance, and security architecture initiatives.
• Design and implement security controls for cloud applications, integrations, data conversion, and third-party platforms.
• Establish security policies, access controls, user provisioning/deprovisioning processes, and governance standards.
• Provide oversight of IAM, SSO, MFA, PAM, SIEM, DLP, encryption, and vulnerability management programs.
• Conduct risk assessments, compliance reviews, audit remediation, and security control validation.
• Drive security strategies related to disaster recovery, business continuity, incident response, and operational readiness.
• Partner with executive stakeholders, business leaders, technical teams, and vendors to ensure security requirements are embedded throughout the program lifecycle.
• Oversee vendor security compliance, SLA monitoring, and implementation of risk mitigation strategies.
• Advise on AI governance, secure use of AI-enabled technologies, and emerging security threats.

Required Experience

• 10+ years of experience in Security Architecture, Cybersecurity, Governance, Risk, and Compliance (GRC), or related leadership roles.
• Proven experience designing and implementing security programs for large enterprise SaaS environments.
• Deep expertise with:
• Identity & Access Management (IAM)
• Single Sign-On (SSO)
• Multi-Factor Authentication (MFA)
• Privileged Access Management (PAM)
• Security Information & Event Management (SIEM)
• Data Loss Prevention (DLP)
• Strong knowledge of security frameworks and controls including:
• NIST
• ISO 27001
• COBIT
• SOX
• ITIL
• Experience leading risk assessments, audit activities, compliance initiatives, and security remediation programs.
• Strong understanding of cloud security architecture and enterprise security operations.
• Excellent stakeholder management and executive communication skills.

Preferred Experience

• Workday Security
• Workday Prism
• Snowflake Security
• AI Security & Governance
• HRIS, Payroll, ERP, or enterprise SaaS transformation programs
• Azure Active Directory / Microsoft Identity Solutions
• Large-scale cloud migration and modernization initiatives
• Public sector or highly regulated industry experience

Technical Environment

Workday  Workday  Prism  Azure  AD  IAM  SSO  MFA  PAM  SIEM  Snowflake  JIRA  DLP  Cloud  Security  Platforms  Vulnerability  Management  Tools  Enterprise  Compliance  Frameworks

Ideal Candidate

You are a strategic security leader who can bridge business objectives and technical security requirements. You have successfully established security governance frameworks, implemented enterprise security controls, and driven compliance initiatives within large, complex cloud environments. You are comfortable working with executives, technical teams, and external vendors while championing security best practices across the organization.

Additional Details

• Contract Length: 18-24+ Months
• Hours: 37.5-40 hours per week
• Hybrid Schedule: Minimum of four onsite days per month
• Interview Process: Phone screening followed by multiple interview rounds
• Background Requirements: Background check, compliance verification, and professional references required