Description

Key Responsibilities:

• Design and implement enterprise cybersecurity architectures aligned with SOX compliance and regulatory requirements.
• Lead security assessments and architecture reviews for applications, infrastructure, cloud environments, and enterprise platforms.
• Define and enforce security controls related to ITGCs, access management, change management, logging, monitoring, and data protection.
• Collaborate with internal audit and compliance teams to support SOX audits, remediation activities, and control testing.
• Develop cybersecurity standards, policies, procedures, and technical control frameworks.
• Conduct risk assessments and identify security gaps within enterprise systems and business processes.
• Architect secure solutions across on-premises, hybrid, and cloud environments (AWS, Azure, GCP).
• Provide technical leadership for IAM, PAM, SIEM, endpoint security, network security, and data security initiatives.
• Support incident response planning, vulnerability management, and remediation strategies.
• Partner with cross-functional stakeholders to ensure cybersecurity controls are integrated into SDLC and operational processes.
• Maintain security documentation, architecture diagrams, and compliance evidence repositories.
• Stay current with emerging cybersecurity threats, technologies, and compliance standards.

Required Qualifications:

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or related field.
• 8+ years of experience in cybersecurity, information security, or security architecture.
• 3+ years of experience supporting SOX compliance and ITGC environments.
• Strong understanding of:
  • SOX ITGC Controls
  • NIST, ISO 27001, CIS, COBIT frameworks
  • Risk Management & Governance
  • Identity & Access Management (IAM)
  • Security Architecture & Secure Design
  • Cloud Security
  • Vulnerability & Threat Management
• Experience with enterprise security tools and technologies including:
  • SIEM platforms
  • PAM solutions
  • Endpoint protection
  • DLP
  • Firewalls & network security
• Strong knowledge of cloud security architectures for AWS, Azure, and/or GCP.
• Experience supporting external/internal audits and remediation programs.
• Excellent analytical, documentation, communication, and stakeholder management skills.

Preferred Qualifications:

• Professional certifications such as:
  • CISSP
  • CISM
  • CISA
  • CCSP
  • CRISC
• Experience in regulated industries such as finance, healthcare, or retail.
• Familiarity with DevSecOps and secure SDLC practices.
• Experience with automation and security orchestration tools is a plus.

Key Skills:

• Cybersecurity Architecture
• SOX Compliance
• ITGC Controls
• Risk & Compliance Management
• IAM / PAM
• Cloud Security
• Security Governance
• Vulnerability Management
• Audit & Remediation
• Enterprise Security Frameworks

Key Skills

Education

Bachelor’s degree