Director, Cybersecurity Architecture

Overview Who We Are: Crowley is a privately held, U.S.-owned and operated company serving the maritime, logistics and energy industries with scale in 36 nations and island territories. Our Purpose is to bravely advance what’s possible to elevate people and planet, guided by our values of Integrity, Sustainability and Drive. With more than $3 billion in annual revenue, our solutions provide integrated supply chains with a commitment to safety and reliability in our ocean and land transportation services and facilities. We set high standards, operate with discipline, and continuously improve how we work. Performance, operational excellence and innovation drive how we compete, grow and deliver to our customers and partners. Work Arrangement Hybrid What You'll Do Leads cybersecurity architecture and engineering across the enterprise, establishing security standards, reference architectures, technical controls and reusable design patterns that enable secure technology delivery. Partners across Technology and the business to integrate security into solutions early, balance cyber risk with business priorities, and support commercial, government, regulatory and contractual requirements. Translates cyber risk into meaningful business conversations that help leaders understand exposure, trade-offs, investment needs and recommended actions. Responsibilities Key Responsibilities: Develop and maintain the cybersecurity architecture roadmap, aligning priorities, dependencies and milestones with enterprise technology roadmaps and business plans.Establish and maintain security architecture principles, reference architectures, technical standards, control baselines and reusable design patterns. Lead secure-by-design reviews through enterprise architecture and technology governance processes, ensuring security requirements and approved conditions are addressed before deployment. Coordinate cybersecurity architecture and engineering plans with Infrastructure, IT Operations, Applications, Data, Cloud, Enterprise Architecture and other technology teams. Develop and manage budgets, forecasts and business cases for cybersecurity architecture and engineering capabilities; connect investments to risk reduction, regulatory needs, resilience and business outcomes. Translate cyber threats, vulnerabilities and control gaps into clear business impacts, options and recommendations for executives and non-technical stakeholders. Provide architecture guidance across cloud, identity, network, endpoint, application, data, operational technology, IoT and other connected environments. Define security acceptance criteria, required telemetry and engineering requirements; partner with delivery teams to implement, validate and operationalize approved designs. Evaluate security technologies and services based on business fit, architecture alignment, risk reduction, supportability, cost and integration requirements. Govern technical exceptions and security design debt, including documented rationale, compensating controls, accountable owners and remediation plans. Lead the Security Operations Center and cybersecurity incident response capability, including monitoring, detection, investigation, containment, recovery coordination, threat intelligence, digital forensics, escalation and continuous improvement. Establish the SOC operating model, service expectations, response plans, playbooks, escalation paths, performance measures and coordination processes with Technology, Legal, Risk, Communications and business teams. Use operational findings, incidents, assessments, audits and technology changes to improve security patterns and priorities. Lead, coach and develop cybersecurity architects and engineers, while building cross-functional communities of practice and reducing single-person dependencies. Maintain effective relationships with business leaders, technology teams, Legal, Risk, vendors, customers and government or regulatory stakeholders, as appropriate. Qualifications Education & Credentials: Bachelor's degree in computer science, information systems, business or a related field; or a combination of post-high school education and experience equal to nine (9) years. Experience 10+ years of progressively responsible experience in cybersecurity, enterprise architecture, infrastructure, cloud, security operations or related technology disciplines, including 5+ years of leadership experience. Demonstrated experience leading or overseeing a Security Operations Center and major cybersecurity incident response; building security architectures, roadmaps and investment plans; coordinating delivery across multiple technology teams; and presenting cyber risk, options and recommendations to executive and business audiences. Experience in government, regulated, critical infrastructure, operational technology, maritime or similarly complex environments is preferred Technical Skills Strong knowledge of enterprise security architecture and secure-by-design practices; cloud and hybrid infrastructure; identity and Zero Trust; network, endpoint, application and data security; encryption and key management; security monitoring and automation; and architecture threat modeling. Strong working knowledge of SOC operations, incident command, detection engineering, logging and telemetry, threat intelligence, vulnerability management, digital forensics and incident response. Experience applying government and industry frameworks such as NIST, CMMC, ISO 27001 or comparable standards. Familiarity with operational technology and critical-infrastructure security principles is preferred. One of the following certifications: CISSP, CISM, or CCISO. Other Ability to travel and participate in incident, regulatory, customer or executive discussions when architecture expertise is required. Competencies Translates cyber risk into clear business impacts, trade-offs, investment choices and recommended actions. Communicates effectively with executives, business leaders, engineers, auditors, customers and government stakeholders. Builds practical roadmaps, budgets and business cases that connect technology work to risk reduction and business outcomes. Coordinates priorities, dependencies and delivery commitments across multiple technology teams. Applies strong architecture judgment while balancing security effectiveness, resilience, user experience, cost and speed. Influences across organizational boundaries and creates alignment without depending solely on formal authority. Converts requirements into reusable patterns rather than one-off solutions. Uses evidence, operational results and measurable outcomes to adjust priorities and improve designs. Develops technical talent, cross-training, documentation and succession coverage. Challenges designs constructively and helps teams reach an approved and supportable deployment path. What We Offer? We inspire top talent by offering a comprehensive and competitive package that supports the diverse needs of our people—on land, at sea, in offices, and remotely. Our Total Rewards Include Competitive pay with recognition programs Comprehensive benefits: medical, dental, and vision insurance, life and disability coverage, and paid vacation and holidaysLeave and family support: parental leave and sick leaveLearning and growth: access to training and development for continuous skill developmentWell-being resources: Employee Assistance Program, wellness program, and gym membership discounts At Crowley, we invest in you—your success, your health, and your future.