Senior Security Strategist, Enterprise Architecture

Publicis Re:Sources; Boston (MA); On-site; USD 90,000 - 120,000; Full time

Job summary

Publicis Re:Sources is seeking a Senior Security Strategist to drive enterprise security architecture governance and capability strategy in a global, fast-moving environment. You will translate security priorities into target-state capabilities and roadmaps, balancing business goals with risk and regulatory expectations.

The role requires 5–8 years in security strategy and architecture, strong cloud security knowledge, and experience with ISO 27001, NIST CSF, and MITRE ATT&CK.

Qualifications

• 5 to 8 years of experience in security strategy, enterprise security architecture, risk management, or related security roles.
• Strong understanding of cloud security across Azure, AWS, and GCP at the capability and control-design level.
• Experience with capability assessment, target-state architecture, threat modeling, and risk analysis.
• Working knowledge of ISO 27001, NIST CSF, and MITRE ATT&CK.
• Strong written and verbal communication, with the ability to present concise recommendations to leadership and partner teams.

Responsibilities

• Support the Director of Security Strategy and Innovation in executing strategic security priorities across programs, platforms, and business initiatives.
• Prepare briefing materials, maturity assessments, and decision support content for leadership audiences.
• Track strategic initiatives, capability gaps, and roadmap commitments to support program execution and follow-through.
• Operate at the security ecosystem level: define target-state security capabilities and how they fit across the enterprise.
• Identify capability gaps, overlaps, and redundancies across the security portfolio and recommend enhancements, consolidations, or retirements.
• Shape and maintain the strategic roadmap for security capabilities aligned to business needs and risk priorities.
• Apply structured analysis using ISO 27001, NIST CSF, and MITRE ATT&CK to support decisions.
• Help define operating models for strategic initiatives and develop RACIs and processes spanning involved teams.
• Evaluate new security technologies, AI-enabled tools, and automation opportunities relevant to risk priorities.
• Monitor threat trends and coordinate with security operations, compliance, privacy, legal, and business teams.

Skills

Security strategy

Enterprise security architecture

Risk management

Cloud security (Azure AWS GCP)

ISO 27001

NIST CSF

MITRE ATT&CK

Leadership communication

Job description

Publicis Re:Sources is seeking a Senior Security Strategist to drive enterprise security architecture governance and capability strategy in a global, fast-moving environment. You will translate security priorities into target-state capabilities and roadmaps, balancing business goals with risk and regulatory expectations.

The role requires 5–8 years in security strategy and architecture, strong cloud security knowledge, and experience with ISO 27001, NIST CSF, and MITRE ATT&CK.