Job Title:  Enterprise Cybersecurity Architect

What You Need To Know

Shape a remarkable future with us. Build a career working for an industry leader that truly invests in their people – and equips them with leading technology, continuous learning, and the ability to bring their best selves to work. As the premier wine and spirits distributor, Southern Glazer’s isn't just one of Forbes’ Top Private Companies; it's a family-owned business with deep roots dating back to 1933.

The reputation of Southern Glazer’s is well-established, and it's no surprise that we are regularly recognized for our culture. Southern Glazer’s has been recognized by Newsweek as one of America’s Greatest Workplaces for Inclusion and Diversity, as well as for Women and Parents and Families. These accolades speak volumes about our commitment to creating a supportive and inclusive culture of belonging for all employees.

As a full-time employee, you can choose from a wide-ranging menu of our Top Shelf Benefits, including comprehensive medical and prescription drug coverage, dental and vision plans, tax-saving Flexible Spending Accounts, disability coverage, life insurance plans, and a 401(k) plan. We also offer tuition assistance, a wellness program, parental leave, vacation accrual, paid sick leave, and more.

By joining Southern Glazer’s, you would be part of a team that values excellence, innovation, and community. This is more than just a job – it's an opportunity to build the future of beverage distribution and grow with a company that truly cares about its people.

Overview

The Enterprise Cybersecurity Architect acts as a strategic cybersecurity leader, guiding the organization’s security architecture, cyber risk reduction, and secure technology transformation initiatives. In this role, the Enterprise Cybersecurity Architect provides expert guidance on applying existing, new, and emerging security technologies and architecture practices to protect enterprise assets, enable secure business growth, and strengthen the organization’s cyber resilience. This role operates as a senior individual contributor and enterprise technical authority, influencing strategy, standards, and architecture direction through expertise, governance, and cross-functional leadership rather than direct people management. This role leads the cybersecurity architecture function, translating threat intelligence, regulatory expectations, business priorities, and enterprise technology strategy into security roadmaps, reference architectures, standards, and design patterns. The Enterprise Cybersecurity Architect ensures that solutions are secure by design, resilient, scalable, maintainable, and aligned to the organization’s long-term cybersecurity and business objectives.

Primary Responsibilities

• Lead the development of enterprise cybersecurity architecture vision and technology direction, connecting business strategy, cyber risk priorities, and security capabilities through actionable architecture roadmaps and guiding principles.
• Shape and maintain the cybersecurity architecture roadmap across identity, infrastructure, cloud, applications, data, network, endpoint, third-party, and operational technology domains; coordinate investment plans, interdependencies, and enterprise priorities.
• Serve as a senior security design authority for the most complex, high-risk, cross-portfolio solutions; lead cybersecurity architecture governance; and ensure adherence to security roadmaps, standards, policies, and control requirements.
• Establish and maintain authoritative security design patterns, reference architectures, control patterns, and cybersecurity architecture standards to drive consistent adoption across the enterprise.
• Define security architecture guidance for emerging technologies, including AI and Generative AI, with attention to data protection, access controls, model risk, responsible AI practices, and secure lifecycle standards.
• Assess external cyber threat trends, emerging attack techniques, regulatory expectations, and security technology forces; author executive position papers that identify strategic cyber risks, opportunities, and required investments.
• Ensure vendor, platform, and security technology selections align with enterprise cybersecurity strategy, risk appetite, control objectives, and long-term architecture direction.
• Drive security-by-design, zero trust, least privilege, defense-in-depth, segmentation, secure configuration, data protection, and resilience principles across the technology portfolio.
• Partner with security operations, risk management, infrastructure, engineering, application, data, privacy, and compliance teams to ensure architectures support threat detection, incident response, disaster recovery, vulnerability management, and regulatory obligations.
• Prioritize remediation of architectural security debt, legacy risk, and systemic control gaps; define measurable outcomes that reduce likelihood and impact of cybersecurity events.
• Set and reinforce the enterprise security architecture quality bar by establishing expectations for secure engineering, operational readiness, logging, monitoring, resilience, and incident response integration.
• Expand cybersecurity architecture capacity by mentoring architects and engineers, delegating to qualified security architecture leaders, and championing a security-first architecture culture and common language across SGWS.

Preferred Qualifications

• Expert knowledge of cybersecurity architecture frameworks, control frameworks, and security standards such as NIST CSF, NIST 800-53, ISO 27001, CIS Controls, SABSA, zero trust, secure SDLC, threat modeling, and risk-based architecture decisioning.
• Expert knowledge of modern security architecture patterns across AWS cloud services, SaaS, IaaS, PaaS, microservices, APIs, identity and access management, privileged access, encryption, key management, secrets management, event-driven architecture, data protection, and security analytics; relevant certifications may include CISSP, CCSP, CISM, SABSA, TOGAF, AWS/Azure security certifications, or similar credentials.
• Expert knowledge of business, operating, risk, and financial models—including cost-benefit analysis, cyber risk quantification, and risk management—with proven ability to set cybersecurity architecture direction, create security roadmaps, and govern current and target state at the enterprise level.
• Proven ability to assess cyber threat trends, attack surface exposure, emerging technologies, and regulatory drivers; author executive position papers identifying strategic cyber risks, opportunities, and recommended investments.
• Proven ability to lead cross-functional teams across cybersecurity, infrastructure, engineering, applications, cloud, data, risk, privacy, and compliance; develop and mentor architects at all levels through coaching and delegation.
• Recognized thought leader in cybersecurity architecture with a track record of influencing enterprise security strategy, reducing systemic cyber risk, enabling secure business transformation, and advising C-suite stakeholders on cybersecurity investment decisions.

Minimum Qualifications

• Master’s or Bachelor’s degree in related field (e.g., Cybersecurity, Computer Science, Computer Engineering, Information Technology, Information Assurance, System Analysis, or related discipline) or equivalent combination of education and work experience.
• Typically, 15+ years of experience in IT, cybersecurity, and business/industry, including strategic and operational planning across multiple technology and security disciplines. This includes 10+ years of relevant architecture experience spanning security, infrastructure, cloud, application, data, identity, and technical architecture domains, with 5+ years leading enterprise-wide cybersecurity architecture strategy, governance, portfolio roadmaps, or large-scale secure transformation initiatives.
• Demonstrated experience shaping cybersecurity architecture strategy, governance, standards, control patterns, and reference architectures for an enterprise technology portfolio, with proven ability to influence cybersecurity and technology roadmaps at the executive level.
• Demonstrated ability to influence and align C-suite, senior technology, risk, compliance, and business stakeholders, building executive consensus on cybersecurity architecture direction and investment decisions.
• Track record of delivering measurable risk reduction and business outcomes through cybersecurity architecture, such as improved resilience, reduced attack surface, stronger identity and access controls, vulnerability reduction, secure modernization, and portfolio simplification.
• Experience working across diverse security and technology environments, including cloud, SaaS, IaaS, PaaS, network, endpoint, identity, application, data protection, and enterprise platform ecosystems.
• Strong written and verbal communication skills, with the ability to translate complex cybersecurity concepts for executive, technical, and business audiences.
• Experience in DevSecOps, Agile technology environments, threat modeling, secure SDLC, cloud security architecture, AI/GenAI security, cyber risk quantification, and related advanced security practices preferred.

Physical Demands

• Physical demands include a considerable amount of time sitting and typing/keyboarding, using a computer (e.g., keyboard, mouse, and monitor), or adding machine
• Physical demands with activity or condition may include walking, bending, reaching, standing, squatting, and stooping
• May require occasional lifting/lowering, pushing, carrying, or pulling up to 20lbs

EEO Statement

Southern Glazer's Wine and Spirits, an Affirmative Action/EEO employer, prohibits discrimination and harassment of any type and provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training. SGWS complies with all federal, state and local laws concerning consideration of a qualified applicant's arrest and/or criminal conviction records. Southern Glazer's Wine and Spirits provides competitive compensation based on estimated performance level consistent with the past relevant experience, knowledge, skills, abilities and education of employees. Unless otherwise expressly stated, any pay ranges posted here are estimates from outside of Southern Glazer's Wine and Spirits and do not reflect Southern Glazer's pay bands or ranges.

If you have any questions or concerns about whether this posting complies/adheres with local pay transparency requirements, please contact the SGWS talent acquisition team at NationalTA@sgws.com