Strategic Leader, Enterprise Security Architecture

Cencora; Darby (Delaware County); On-site; USD 142,000 - 283,000; Full time

Job summary

Cencora seeks a Senior Director of Enterprise Security Architecture to lead the definition, governance, and enforcement of architecture strategy across the enterprise. The role aligns cybersecurity architecture with business strategy, digital transformation, regulatory obligations, and risk appetite.

You will oversee reference architectures, security design standards, architecture review boards, and integration with EA, Cloud, Data, AI, Infrastructure, and Applications.

Qualifications

• Bachelor's degree or equivalent in IS/CS or related field; advanced degree preferred.
• 12+ years of directly-related or relevant experience with 8+ years in a managerial capacity, preferably in information security.
• CCSP, CISSP, SABSA, TOGAF, CRISC, CISM, SC-100, ITIL, OSCP, PMP certifications a plus.

Responsibilities

• Define and maintain the enterprise security architecture vision and multi-year roadmap.
• Align security architecture with corporate strategy and modernization initiatives.
• Establish target-state architectures with Zero Trust in collaboration with other leaders.
• Translate risk appetite into enforceable architectural guardrails.
• Develop standardized reference architectures for Cloud/hybrid infrastructure, IAM, data protection, network segmentation, app security, AI/GenAI security, OT/IoT.
• Ensure security-by-design integration into SDLC and platform engineering models.
• Govern architecture artifacts across global units.
• Chair or co-chair the SARB.
• Define security architecture review processes and risk exception workflows.
• Establish measurable design assurance criteria.
• Partner with EA for integrated governance.
• Translate regulatory requirements into technical standards and ensure compliance (HIPAA GDPR SOX FDA).
• Maintain security standards mapped to NIST ISO SOC2 PCI HIPAA GDPR.
• Enable reusable security requirement models for programs.
• Drive automation of control validation and policy-as-code enforcement.
• Support regulatory readiness across jurisdictions.
• Ensure architecture supports data residency and sovereignty.
• Collaborate with Legal/Privacy/Compliance on regulatory impacts.
• Provide defensible architecture documentation for audit.
• Lead security architecture assessments for acquisitions and divestitures.
• Support ERP/digital/AI/cloud transformation programs.
• Establish rapid risk assessment models for new tech.
• Establish KPIs/OKRs and dashboards.
• Track control design effectiveness and systemic risk reduction.
• Integrate architecture insights with cyber analytics.
• Report risk posture to executive leadership.
• Lead global team of security domain architects.
• Define operating model across centralized/federated teams.
• Establish architecture career paths and competency frameworks.
• Enterprise financial management and planning experience.

Skills

IT Risk Management

IT Controls

Cyber Attack Mitigation

Enterprise IT Management

Cloud Security

Network Security

Identity & Access Management

Application Security

Service Level Maintenance

Information Security Strategy Continu"

Threat Modelling

SOX ISO NIST PCI

Education

Bachelor's degree in computer science, software engineering, systems engineering, information technology, cybersecurity

Master's Degree in Business Administration, Computer Science, Information Technology or related discipline

Tools

Microsoft Office Suite

Security Tools - CSPM CWPP CDR CNAPP SIEM EDR

Threat Intelligence Tools

Vulnerability Testing Tools

Job description

Cencora seeks a Senior Director of Enterprise Security Architecture to lead the definition, governance, and enforcement of architecture strategy across the enterprise. The role aligns cybersecurity architecture with business strategy, digital transformation, regulatory obligations, and risk appetite.

You will oversee reference architectures, security design standards, architecture review boards, and integration with EA, Cloud, Data, AI, Infrastructure, and Applications.