Director, Cybersecurity Architecture at Crowley in Jacksonville, FL

Job description

Overview Who We Are: Crowley is a privately held, U.S.-owned and operated company serving the maritime, logistics and energy industries with scale in 36 nations and island territories. Our Purpose is to bravely advance what’s possible to elevate people and planet, guided by our values of Integrity, Sustainability and Drive. With more than $3 billion in annual revenue, our solutions provide integrated supply chains with a commitment to safety and reliability in our ocean and land transportation services and facilities. We set high standards, operate with discipline, and continuously improve how we work. Performance, operational excellence and innovation drive how we compete, grow and deliver to our customers and partners. Work Arrangement: Hybrid What You'll Do: Leads cybersecurity architecture and engineering across the enterprise, establishing security standards, reference architectures, technical controls and reusable design patterns that enable secure technology delivery. Partners across Technology and the business to integrate security into solutions early, balance cyber risk with business priorities, and support commercial, government, regulatory and contractual requirements. Translates cyber risk into meaningful business conversations that help leaders understand exposure, trade-offs, investment needs and recommended actions. Responsibilities Key Responsibilities: Develop and maintain the cybersecurity architecture roadmap, aligning priorities, dependencies and milestones with enterprise technology roadmaps and business plans. Establish and maintain security architecture principles, reference architectures, technical standards, control baselines and reusable design patterns. Lead secure-by-design reviews through enterprise architecture and technology governance processes, ensuring security requirements and approved conditions are addressed before deployment. Coordinate cybersecurity architecture and engineering plans with Infrastructure, IT Operations, Applications, Data, Cloud, Enterprise Architecture and other technology teams. Develop and manage budgets, forecasts and business cases for cybersecurity architecture and engineering capabilities; connect investments to risk reduction, regulatory needs, resilience and business outcomes. Translate cyber threats, vulnerabilities and control gaps into clear business impacts, options and recommendations for executives and non-technical stakeholders. Provide architecture guidance across cloud, identity, network, endpoint, application, data, operational technology, IoT and other connected environments. Define security acceptance criteria, required telemetry and engineering requirements; partner with delivery teams to implement, validate and operationalize approved designs. Evaluate security technologies and services based on business fit, architecture alignment, risk reduction, supportability, cost and integration requirements. Govern technical exceptions and security design debt, including documented rationale, compensating controls, accountable owners and remediation plans. Lead the Security Operations Center and cybersecurity incident response capability, including monitoring, detection, investigation, containment, recovery coordination, threat intelligence, digital forensics, escalation and continuous improvement. Establish the SOC operating model, service expectations, response plans, playbooks, escalation paths, performance measures and coordination processes with Technology, Legal, Risk, Communications and business teams. Use operational findings, incidents, assessments, audits and technology changes to improve security patterns and priorities. Lead, coach and develop cybersecurity architects and engineers, while building cross-functional communities of practice and reducing single-person dependencies. Maintain effective relationships with business leaders, technology teams, Legal, Risk, vendors, customers and government or regulatory stakeholders, as appropriate. Q