Cybersecurity Technology Architect III

Role Summary
This position is a senior cybersecurity leadership role responsible for developing and implementing enterprise-wide cybersecurity strategies, governance frameworks, and risk management programs. The role serves as a key liaison between the cybersecurity organization and regulatory agencies, ensuring compliance and fostering effective communication across departments. The individual will oversee risk assessment activities across IT, operational technology (OT), and AI/ML domains, with a focus on emerging technology risks and regulatory standards.

Responsibilities

• Act as a primary liaison between the cybersecurity team and regulatory agencies to ensure compliance with applicable standards and regulations.
• Lead enterprise cybersecurity programs, initiatives, and steering committees, providing strategic oversight and guidance.
• Develop and maintain comprehensive cybersecurity strategy roadmaps aligned with organizational goals.
• Manage a dynamic risk portfolio, assessing and reporting on the aggregated risk posture across all business units.
• Evaluate AI/ML models for bias, data leakage, adversarial attacks, and integrity, ensuring adherence to global governance frameworks such as NIST AI Risk Management Framework.
• Collaborate with legal and compliance teams to establish usage policies, harm taxonomies, and mitigation strategies for frontier AI models.
• Conduct consequence-based risk assessments on operational technology (OT) systems, including ICS, SCADA, and PLCs, identifying vulnerabilities and recommending security enhancements.
• Develop and enforce OT-specific security policies aligned with industry standards like NIST 800-82.
• Stay informed about evolving cybersecurity trends, standards, and regulatory requirements to inform strategic planning and risk management activities.
• Provide technical guidance and leadership in cybersecurity assessments, compliance initiatives, and risk mitigation strategies.

Qualifications

• Bachelor’s degree in Computer Science, Information Systems, or a related field; Master’s degree preferred.
• Minimum of 8 years of experience in cybersecurity, critical infrastructure, or related fields, including IT and operational technology security.
• Relevant certifications such as CompTIA Security+, SANS, Cisco, GIAC, or Microsoft Security required; CISSP, CISM, CRISC, or CISA preferred.
• Proven experience leading large-scale cybersecurity programs and initiatives.
• Strong understanding of cybersecurity frameworks and standards including NIST, ISO, SOX, NERC CIP, CCPA, HIPAA, NRC.
• Experience evaluating AI/ML models for security and governance considerations.
• Knowledge of operational technology systems such as ICS, SCADA, and PLCs, with ability to conduct vulnerability assessments.
• Excellent communication, influence, and leadership skills to engage with cross-functional teams and regulatory bodies.
• Ability to perform detailed risk assessments and develop strategic cybersecurity roadmaps.
• In compliance with federal law, all persons hired must verify their identity and eligibility to work in the United States and complete the required employment eligibility verification form upon hire. Candidates must be legally authorized to work in the United States without employer sponsorship, now or in the future.
   

This position offers a hybrid schedule, with time split between the office and remote work.