Director, Security Architecture & Engagement

Job Summary Our client, a leading media & entertainment company, is seeking a Director - Security Architecture and Engagement to lead a team of security architects and engineers while personally driving the relationships that make secure-by-design possible: helping stakeholders understand requirements, navigate security processes, remove barriers, and make informed risk-based decisions. This is not primarily a compliance-enforcement role. It is a business-enablement role: the Director succeeds by building trust with stakeholders, simplifying cybersecurity complexity, and helping teams deliver innovative capabilities securely and efficiently, while staying close enough to the architecture and engineering work to remain credible with the technologists doing it. You’ll partner with peer Directors across Strategy, Engineering and Architecture and with technology and business leaders across the enterprise to make sure new solutions are secure by design, not bolted on after the fact. This position is W-2 only. We do not work with third-party firms or C2C arrangements for this role. Core ResponsibilitiesServe as a primary cybersecurity advisor to business, technology, product, and engineering leaders across the enterpriseBuild trusted relationships with stakeholders by providing practical, business-focused security guidance rather than one-size-fits-all mandatesTranslate complex security and architecture requirements into clear, actionable recommendations for both technical and executive audiencesFacilitate productive conversations between business teams, architects, engineers, compliance partners, and security stakeholdersHelp teams understand security expectations early in planning and delivery, so security is a design input rather than a late-stage gateCollaborate with business and technology leaders to understand their strategies, objectives, and roadmaps, and align cybersecurity architecture to those prioritiesEnable project teams to navigate cybersecurity review and governance processes efficiently; identify viable paths forward when security concerns arise rather than simply blocking themEducate stakeholders on security standards, approved patterns, and secure implementation approaches; promote self-service knowledge and repeatable patterns that reduce frictionDrive a positive customer experience for teams engaging with GIS and SEA services and identify opportunities to streamline reviews and reduce organizational riskLead security engagement with strategic vendors and third parties, partnering with procurement, legal, and business teams throughout evaluation and onboardingDesign complex security frameworks and integrations across people, processes, and technology; define specifications and integration parameters for compatibility across platformsConceive, visualize, and communicate architecture models, strategies, and reference architectures used across multiple products, systems, and teamsProvide multi-layered technical expertise for next-generation initiatives such as Zero Trust Network Architecture, Data Security, AI Security, Identity and Access Management, and Secure AccessLead regular Architecture Engagement Meetings with leadership: establish and maintain architecture standards, design patterns, and prescriptions, and guide evaluation of new technology through research and hands-on lab workEnsure the creation and maintenance of security architecture artifacts, including reference architectures, control frameworks, design patterns, standards, and policies, and support governance through control mapping and alignment to frameworks such as NIST 800-53, CIS Benchmarks, and ISO 27001Guide advanced risk and threat analysis activities, including threat modeling, architecture risk reviews, and vulnerability assessments, ensuring internal incident trends and external threat intelligence inform architectural decisions and mitigationsPartner with business-unit Solutions Engineering and Enterprise Architecture teams to integrate DevSecOps and product security practices, shepherding end-to-end security tollgates for application developmentAdopt and evangelize GIS risk index/KPIs to shift the security program from coverage-based to risk-based decision-makingWork with other architects to optimize cloud infrastructure and deliver secure, cost-effective compute across AWS, Azure, and GCPLead, mentor, and grow a team of security architects and engineers, including partners located outside the U.S.; manage issues and escalations so work keeps flowing efficientlyFoster a collaborative, service-oriented culture focused on partnership and business enablement rather than gatekeepingProvide continuous coaching and feedback and support the career aspirations and well-being of team members, building an accountable, high-performing teamTrack budgets, report status and key decisions to leadership, and ensure deliverables are high quality and clearly documentedAdvise senior leadership on emerging threats, vulnerabilities, and business impact in business language suited to executive audiences Required Skills/Experience (Must-Haves)Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Software, Electrical or Electronics Engineering, or equivalent work experience10+ years of experience in a technology organization, including at least 3 years in a DevOps function and 2+ years of information security experience supporting a moderate-to-large, federated organizationDemonstrated experience as a trusted advisor or customer-facing security consultant to business and technology stakeholders, in addition to hands-on architecture experienceDemonstrated success in one or more of: Application Security/SDLC, Data Security, Penetration Testing, Advanced Threat Detection & Monitoring, Automation & Machine Learning, or Security Operations & Threat HuntingCohesive understanding of Information Security Management Systems (ISMS), including frameworks, principles, controls, capabilities, technologies, and platforms, along with strong working knowledge of risk analysis methodologies and control frameworks such as NIST 800-53, CIS Benchmarks, and ISO 27001Broad, hands-on experience across business, application, information, infrastructure, identity and access management, networking, and security architecture domains within a large, heterogeneous enterprise environmentHands-on familiarity with cloud platforms (AWS, Azure, GCP), infrastructure-as-code (e.g., Terraform), and container orchestration (e.g., Kubernetes)Experience managing or leading geographically dispersed technical teams, including internal staff and outsourced/contract resources, with 5+ years in a management or leadership role providing direction through managers and senior individual contributors across multi-disciplinary technical teamsExcellent communication and relationship-building skills, with a proven ability to translate advanced technical and security topics for technical and non-technical audiences, including senior executivesStrong analytical and problem-solving skills, with the ability to quantify the business value of security work and balance delivery across multiple projects and demands simultaneously Preferred Skills/Experience (Nice-to-Haves) Industry certification such as CISSP, GCIH, CISM, CISA, CEH, or AWS Certified Security – Specialty/Solutions ArchitectPrior Fortune 100 experience strongly preferredIn-depth knowledge of the regulatory landscape relevant to a global media and entertainment company (e.g., Sarbanes-Oxley, HIPAA, PCI, GDPR, and other data-privacy regulations)Background in advanced cybersecurity testing, adversarial simulations, or penetration testing, and familiarity with system hardening across compute and network platformsExperience with CI/CD pipelines, infrastructure-as-code, and security tooling integration across cloud and on-premises environments, and exposure to modern delivery toolchains (e.g., Jenkins, GitLab, Splunk, Vault, Kubernetes) and cloud-native, 12-factor application patternsPassion for learning new things, tempered with a bias toward adding real value to the business Work Environment Location: Burbank, CA / Seattle, WA / New York, NY / Orlando, FLHYBRIDContract: 12 months Compensation & Benefits Pay Range: The approximate pay range for this position is between $70.00 and $100.00 per hour. Please note that the pay range provided is a good faith estimate. Final compensation may vary based on factors including but not limited to background, knowledge, skills, and location. We comply with local wage minimums. Medical, Dental, & Vision Insurance Plans Employee Stock Ownership Plan 401K offered About KellyMitchell At KellyMitchell, our culture is world class. We’re movers and shakers! We don’t mind a bit of friendly competition, and we reward hard work with unlimited potential for growth. This is an exciting opportunity to join a company known for innovative solutions and unsurpassed customer service. We're passionate about helping companies solve their biggest IT staffing & project solutions challenges. As an employee-owned, women-led organization serving Fortune 500 companies nationwide, we deliver expert service at a moment's notice. Marketing Disclosure By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from KellyMitchell and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy at https://www.careers.kellymitchell.com/privacy-policy [143412]