Director, Security Architecture & Engagement

Job Summary 
Our client, a leading media & entertainment company, is seeking a Director - Security Architecture and Engagement to lead a team of security architects and engineers while personally driving the relationships that make secure-by-design possible: helping stakeholders understand requirements, navigate security processes, remove barriers, and make informed risk-based decisions. This is not primarily a compliance-enforcement role. It is a business-enablement role: the Director succeeds by building trust with stakeholders, simplifying cybersecurity complexity, and helping teams deliver innovative capabilities securely and efficiently, while staying close enough to the architecture and engineering work to remain credible with the technologists doing it. You’ll partner with peer Directors across Strategy, Engineering and Architecture and with technology and business leaders across the enterprise to make sure new solutions are secure by design, not bolted on after the fact.

This position is W-2 only. We do not work with third-party firms or C2C arrangements for this role.

Core Responsibilities

• Serve as a primary cybersecurity advisor to business, technology, product, and engineering leaders across the enterprise
• Build trusted relationships with stakeholders by providing practical, business-focused security guidance rather than one-size-fits-all mandates
• Translate complex security and architecture requirements into clear, actionable recommendations for both technical and executive audiences
• Facilitate productive conversations between business teams, architects, engineers, compliance partners, and security stakeholders
• Help teams understand security expectations early in planning and delivery, so security is a design input rather than a late-stage gate
• Collaborate with business and technology leaders to understand their strategies, objectives, and roadmaps, and align cybersecurity architecture to those priorities
• Enable project teams to navigate cybersecurity review and governance processes efficiently; identify viable paths forward when security concerns arise rather than simply blocking them
• Educate stakeholders on security standards, approved patterns, and secure implementation approaches; promote self-service knowledge and repeatable patterns that reduce friction
• Drive a positive customer experience for teams engaging with GIS and SEA services and identify opportunities to streamline reviews and reduce organizational risk
• Lead security engagement with strategic vendors and third parties, partnering with procurement, legal, and business teams throughout evaluation and onboarding
• Design complex security frameworks and integrations across people, processes, and technology; define specifications and integration parameters for compatibility across platforms
• Conceive, visualize, and communicate architecture models, strategies, and reference architectures used across multiple products, systems, and teams
• Provide multi-layered technical expertise for next-generation initiatives such as Zero Trust Network Architecture, Data Security, AI Security, Identity and Access Management, and Secure Access
• Lead regular Architecture Engagement Meetings with leadership: establish and maintain architecture standards, design patterns, and prescriptions, and guide evaluation of new technology through research and hands-on lab work
• Ensure the creation and maintenance of security architecture artifacts, including reference architectures, control frameworks, design patterns, standards, and policies, and support governance through control mapping and alignment to frameworks such as NIST 800-53, CIS Benchmarks, and ISO 27001
• Guide advanced risk and threat analysis activities, including threat modeling, architecture risk reviews, and vulnerability assessments, ensuring internal incident trends and external threat intelligence inform architectural decisions and mitigations
• Partner with business-unit Solutions Engineering and Enterprise Architecture teams to integrate DevSecOps and product security practices, shepherding end-to-end security tollgates for application development
• Adopt and evangelize GIS risk index/KPIs to shift the security program from coverage-based to risk-based decision-making
• Work with other architects to optimize cloud infrastructure and deliver secure, cost-effective compute across AWS, Azure, and GCP
• Lead, mentor, and grow a team of security architects and engineers, including partners located outside the U.S.; manage issues and escalations so work keeps flowing efficiently
• Foster a collaborative, service-oriented culture focused on partnership and business enablement rather than gatekeeping
• Provide continuous coaching and feedback and support the career aspirations and well-being of team members, building an accountable, high-performing team
• Track budgets, report status and key decisions to leadership, and ensure deliverables are high quality and clearly documented
• Advise senior leadership on emerging threats, vulnerabilities, and business impact in business language suited to executive audiences

 
Required Skills/Experience (Must-Haves)

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Software, Electrical or Electronics Engineering, or equivalent work experience
• 10+ years of experience in a technology organization, including at least 3 years in a DevOps function and 2+ years of information security experience supporting a moderate-to-large, federated organization
• Demonstrated experience as a trusted advisor or customer-facing security consultant to business and technology stakeholders, in addition to hands-on architecture experience
• Demonstrated success in one or more of: Application Security/SDLC, Data Security, Penetration Testing, Advanced Threat Detection & Monitoring, Automation & Machine Learning, or Security Operations & Threat Hunting
• Cohesive understanding of Information Security Management Systems (ISMS), including frameworks, principles, controls, capabilities, technologies, and platforms, along with strong working knowledge of risk analysis methodologies and control frameworks such as NIST 800-53, CIS Benchmarks, and ISO 27001
• Broad, hands-on experience across business, application, information, infrastructure, identity and access management, networking, and security architecture domains within a large, heterogeneous enterprise environment
• Hands-on familiarity with cloud platforms (AWS, Azure, GCP), infrastructure-as-code (e.g., Terraform), and container orchestration (e.g., Kubernetes)
• Experience managing or leading geographically dispersed technical teams, including internal staff and outsourced/contract resources, with 5+ years in a management or leadership role providing direction through managers and senior individual contributors across multi-disciplinary technical teams
• Excellent communication and relationship-building skills, with a proven ability to translate advanced technical and security topics for technical and non-technical audiences, including senior executives
• Strong analytical and problem-solving skills, with the ability to quantify the business value of security work and balance delivery across multiple projects and demands simultaneously

 
Preferred Skills/Experience (Nice-to-Haves) 

• Industry certification such as CISSP, GCIH, CISM, CISA, CEH, or AWS Certified Security – Specialty/Solutions Architect
• Prior Fortune 100 experience strongly preferred
• In-depth knowledge of the regulatory landscape relevant to a global media and entertainment company (e.g., Sarbanes-Oxley, HIPAA, PCI, GDPR, and other data-privacy regulations)
• Background in advanced cybersecurity testing, adversarial simulations, or penetration testing, and familiarity with system hardening across compute and network platforms
• Experience with CI/CD pipelines, infrastructure-as-code, and security tooling integration across cloud and on-premises environments, and exposure to modern delivery toolchains (e.g., Jenkins, GitLab, Splunk, Vault, Kubernetes) and cloud-native, 12-factor application patterns
• Passion for learning new things, tempered with a bias toward adding real value to the business

 
Work Environment 

• Location: Burbank, CA / Seattle, WA / New York, NY / Orlando, FL
• HYBRID
• Contract: 12 months

 
Compensation & Benefits 

• Pay Range: The approximate pay range for this position is between $70.00 and $100.00 per hour. Please note that the pay range provided is a good faith estimate. Final compensation may vary based on factors including but not limited to background, knowledge, skills, and location. We comply with local wage minimums. 
• Medical, Dental, & Vision Insurance Plans 
• Employee Stock Ownership Plan 
• 401K offered 

 
About KellyMitchell 
At KellyMitchell, our culture is world class. We’re movers and shakers! We don’t mind a bit of friendly competition, and we reward hard work with unlimited potential for growth. This is an exciting opportunity to join a company known for innovative solutions and unsurpassed customer service. We're passionate about helping companies solve their biggest IT staffing & project solutions challenges. As an employee-owned, women-led organization serving Fortune 500 companies nationwide, we deliver expert service at a moment's notice. 
  
Marketing Disclosure 
By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from KellyMitchell and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy at   https://www.careers.kellymitchell.com/privacy-policy 

[143412]