Senior Cybersecurity GRC Architect
Novia Infotech · Boston, MA · 2 wk ago
HybridContract
Senior Security Governance, Risk & Compliance Architect 5660 Hybrid | 18-24+ Month ContractTier4 Group is seeking a Senior Security Governance, Risk & Compliance Architect to lead security strategy, governance, compliance, and risk management for a large-scale cloud-based HR and Payroll modernization initiative. This is a highly visible leadership role responsible for establishing enterprise security frameworks, ensuring regulatory compliance, mitigating risk, and guiding security architecture across a complex SaaS environment. What You'll Do• Lead enterprise security governance, risk management, compliance, and security architecture initiatives.• Design and implement security controls for cloud applications, integrations, data conversion, and third-party platforms.• Establish security policies, access controls, user provisioning/deprovisioning processes, and governance standards.• Provide oversight of IAM, SSO, MFA, PAM, SIEM, DLP, encryption, and vulnerability management programs.• Conduct risk assessments, compliance reviews, audit remediation, and security control validation.• Drive security strategies related to disaster recovery, business continuity, incident response, and operational readiness.• Partner with executive stakeholders, business leaders, technical teams, and vendors to ensure security requirements are embedded throughout the program lifecycle.• Oversee vendor security compliance, SLA monitoring, and implementation of risk mitigation strategies.• Advise on AI governance, secure use of AI-enabled technologies, and emerging security threats. Required Experience• 10+ years of experience in Security Architecture, Cybersecurity, Governance, Risk, and Compliance (GRC), or related leadership roles.• Proven experience designing and implementing security programs for large enterprise SaaS environments.• Deep expertise with:o Identity & Access Management (IAM)o Single Sign-On (SSO)o Multi-Factor Authentication (MFA)o Privileged Access Management (PAM)o Security Information & Event Management (SIEM)o Data Loss Prevention (DLP)• Strong knowledge of security frameworks and controls including:o NISTo ISO 27001o COBITo SOXo ITIL• Experience leading risk assessments, audit activities, compliance initiatives, and security remediation programs.• Strong understanding of cloud security architecture and enterprise security operations.• Excellent stakeholder management and executive communication skills. Preferred Experience• Workday Security• Workday Prism• Snowflake Security• AI Security & Governance• HRIS, Payroll, ERP, or enterprise SaaS transformation programs• Azure Active Directory / Microsoft Identity Solutions• Large-scale cloud migration and modernization initiatives• Public sector or highly regulated industry experience Technical EnvironmentWorkday • Workday Prism • Azure AD • IAM • SSO • MFA • PAM • SIEM • Snowflake • JIRA • DLP • Cloud Security Platforms • Vulnerability Management Tools • Enterprise Compliance Frameworks