Director, Security Architecture & Engineering

POSITION SUMMARY: The Director, Security Architecture and Engineering, is responsible for the strategy and oversight of the Information Security Engineering and Architecture within FPI (Financial Partners, Inc). The Director of Security Architecture & Engineering leads the development and execution of FPI’s enterprise security architecture strategy, ensuring robust protection of systems, data, and infrastructure. This role provides technical leadership, integrating security best practices across cloud and on-prem environments while aligning with regulatory and industry standards. Collaborating with senior leadership and IT teams, the Director drives innovation, risk mitigation, and the implementation of scalable, resilient security solutions.

DUTIES AND RESPONSIBILITIES: 

· Develop and maintain a Security Architecture and Engineering framework for a large financial services technology provider.

· Identify security design gaps in existing and proposed architectures and implement solutions that ensure alignment with industry standards, technology strategies, and organizational goals.

· Ensure that all project rollouts meet stringent security standards and are effectively integrated with existing applications and systems, particularly within cloud ecosystems.

• Develop information security policies, practices, and recommendations for technology enhancements as necessary to reflect changing technology trends and security initiatives.
• Develop and enhance architecture and engineering standards to be used within FPI and partner associations.

· Provide guidance and work with stakeholders on implementing security best practices and Azure-specific security configurations.

• Contribute to evaluating and recommending security products and services, reporting directly to the Chief Information Security Officer (CISO), who retains final decision-making authority.

· Stay informed about emerging threats and vulnerabilities, particularly those targeting cloud platforms, and proactively communicate risks and ensure appropriate teams are engaged to implement mitigation strategies.

· Foster close collaboration with cross-departmental business teams to champion and drive support for and adherence to security initiatives.

· Responsible for organizing and leading mock security events across the company and client base to test and enhance organizational preparedness and response capabilities.

• Perform security risk assessment, testing, and monitoring of security programs and policies and coordinate with the Head of Internal Audit to ensure that the target results meet the expectations of our regulators and customers.

ADDITIONAL FUNCTIONS:

• Work with the FPI CISO and CTO to ensure that the security architecture design is appropriate for all major technology infrastructure and application system development projects.

· Serve as an Information Security Advisory Committee (ISAC) liaison and trusted advisor between stakeholders and Association technical teams to address complex business problems with secure and practical solutions.

· Develop and maintain strong relationships with customer Association business units, ensuring security architecture and engineering initiatives are effectively communicated and supported across the organization.

· Mentor and train team members and other stakeholders on security best practices.

· Other related duties as assigned.

MINIMUM KNOWLEDGE AND EDUCATION REQUIREMENTS:

· Bachelor's degree or equivalent with typically, 15 years of experience related to the duties and responsibilities specified. CISSP, CISM or similar certification is required. Master’s degree in business, technology, or related field highly desired.

• Expert on current technological trends and developments in security architectures with a deep understanding of Financial Services Information Security standards, regulations, and best practices.
• Expert level knowledge of IT (Information Technology) security products and techniques, network infrastructure, applications, and equipment pertinent to a large, distributed, heterogeneous computing environment.
• Must possess advanced verbal and written communication skills to provide technical guidance and leadership to professional personnel in security areas.
• Strong interpersonal skills and the ability to work effectively with a wide range of constituencies in a diverse community.

MANAGERIAL FUNCTIONS

• Oversee daily team operations to ensure alignment with organizational policies while facilitating effective communication, collaboration, continual improvement, and knowledge sharing within the team and across the organization.

• Provide clear direction, goals, and priorities to direct report(s) while mentoring them to enhance their skills and support their professional development.

• Foster a positive and inclusive work environment that supports employee engagement.

• Address conflicts with professionalism and fairness, serving as the first point of contact for employee(s) communication and escalating issues appropriately in collaboration with HR when necessary.

• Ensure employee(s) adherence to organizational policies and procedures by promoting and modeling compliance with labor laws, workplace standards, and ethical practices in all people management activities.

• Manage administrative responsibilities, including reviewing and approving weekly timecards, processing time-off requests, tracking compliance tasks, and supporting team adherence to organizational policies and deadlines.

• Conduct semiannual performance reviews by setting and communicating clear expectations and objectives, monitoring performance against goals, providing continuous feedback, and addressing performance issues promptly and effectively.

• Oversee talent management processes for reports, including hiring, termination, performance evaluations, and pay reviews, ensuring alignment with unit objectives and adherence to company policies and procedures.

ESSENTIAL FUNCTIONS

· Ability to report to work in person and to attend work-related functions/activities.

· Ability to work at a desk and use a computer for extended periods.

· Ability to lift, carry, and move objects up to 10 pounds occasionally.

· Ability to occasionally travel as required.

· Ability to type and utilize various software programs efficiently and operate general office equipment.

· Ability to work in an office setting with moderate noise levels.

· Additional physical demands include, but may not be limited to, frequent talking or hearing, occasional push/pull, stoop/kneel, bend/twist, and reach to retrieve or move items in a typical office environment.

· Must be able to work scheduled hours and overtime as needed.

· Hybrid or remote work arrangements

o This role has been designated as a Hybrid role, which gives employees the opportunity to work from home on Mondays and Fridays and working in the office on Tuesday, Wednesday, and Thursday.  

Exceptions to the designated work arrangement may be made based on business needs

o Please note that the Company retains the right to change a position’s designation at any time.

· Ability to concentrate and focus on details when reviewing documents, analyzing data, and performing computer-based tasks.

· Ability to manage multiple tasks and deadlines while maintaining accuracy and efficiency.

· Ability to problem-solve efficiently and make sound decisions.

· Ability to manage job-related stress and interactions with clients, colleagues, or external parties.

· Ability to communicate ideas clearly in both verbal and written form.

· Ability to work with others in a collegial and collaborative manner

This job description is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities required of the employee for this job.  Duties, responsibilities, and activities may change at any time with or without notice.

REASONABLE ACCOMMODATION: Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of their position.