Role Overview

The Head of Cybersecurity Engineering & Architecture is responsible for the technical security of the organization's cloud and technology environment. This role provides hands-on security leadership across cloud infrastructure, identity, security tooling, vulnerability management, architecture and technical controls. The successful candidate must be able to independently assess technical risk, develop practical solutions and work directly with technology teams to implement and validate those solutions.

Key Responsibilities

• Own cybersecurity engineering and architecture across the cloud environment.
• Own the enterprise vulnerability management program, including scanning, risk-based prioritization, remediation SLAs, exception management, remediation tracking and reporting.
• Establish security architecture standards and technical security requirements.
• Assess cloud infrastructure and identify security weaknesses and control gaps.
• Oversee identity, privileged access and authentication security.
• Manage security tooling and technical security controls.
• Evaluate logging, encryption, endpoint and infrastructure security.
• Coordinate penetration testing and technical remediation.
• Conduct security architecture reviews for major technology initiatives.
• Evaluate security monitoring and detection capabilities.
• Support technical incident response and security investigations.
• Identify opportunities to automate security controls, remediation and repetitive processes.
• Partner closely with Technology and Engineering teams to drive measurable risk reduction.

Requirements

• 8+ years of cybersecurity experience with increasing technical responsibility.
• Strong experience with cloud security and modern technology environments.
• Deep understanding of vulnerability management and risk-based prioritization.
• Experience with IAM/PAM, endpoint security, logging, encryption and security architecture.
• Experience with security tooling, vulnerability scanning and penetration testing.
• Ability to distinguish material security risk from lower-value technical findings.
• Strong written and verbal communication skills.
• Financial services, fintech or regulated-industry experience preferred.

Remote- US Shift