Description
Job Summary
The Security Architect serves as Sorenson's senior security architecture authority and is responsible for defining, advancing, and overseeing the enterprise cybersecurity architecture strategy. Positioned within the Security organization, this role has enterprise-wide influence over security architecture practices across identity, application, cloud, infrastructure, network, data, security operations, resilience, Zero Trust, and emerging technologies.
The Security Architect establishes security principles, standards, reference architectures, technical guardrails, and reusable design patterns that guide the secure development, deployment, operation, and integration of enterprise technologies. The role establishes and leads the Security Architecture Review process for materially significant initiatives, helping ensure security is incorporated early in solution design and technology decision-making.
The role works in close partnership with Enterprise Architecture, Engineering, Product, Data, AI Governance, Legal, Privacy, Compliance, and Risk Management. The Security Architect represents and governs the security architecture domain while aligning with broader enterprise architecture and governance processes.
Artificial intelligence is an important component of the role's emerging-technology responsibilities. The Security Architect defines security architecture and control patterns for AI systems, models, agents, platforms, data pipelines, vector databases, and retrieval-augmented generation solutions while ensuring alignment with enterprise security, data governance, privacy, compliance, risk, and responsible AI objectives.
Success is measured through increased adoption of approved security architecture standards, timely completion of architecture reviews for materially significant initiatives, improved threat-modeling and SSDLC coverage, reduction of systemic architectural risk and technical debt, advancement of Zero Trust and cyber-resilience maturity, and secure deployment of new and emerging technologies.
Essential Duties and Responsibilities
Enterprise Security Architecture Strategy and Standards
- Define, advance, and govern Sorenson's enterprise cybersecurity architecture strategy, principles, standards, reference architectures, and design patterns.
- Develop reusable security architecture patterns and technical guardrails that accelerate secure delivery while maintaining consistency across enterprise systems, products, and platforms.
- Define architectural security requirements and implementation guidance that support business objectives, operational resilience, and risk management goals.
- Maintain alignment between security architecture strategy and Sorenson's enterprise technology strategy through partnership with Enterprise Architecture and technology leadership teams.
Security Architecture Review and Decision Leadership
- Establish and lead the Security Architecture Review process for materially significant technology initiatives, including cloud platforms, enterprise applications, customer-facing products, AI systems, data platforms, third-party services, and major architectural changes.
- Define risk-based review criteria, engagement points, required architecture artifacts, security requirements, and exception-management processes.
- Ensure security is incorporated early in solution design, technology selection, procurement, and implementation planning.
- Document security architecture determinations, required security controls, approved patterns, design alternatives, exceptions, and material risk considerations.
- Provide architectural guidance and recommendations that balance security, operational effectiveness, business objectives, cost, and delivery timelines.
Application Security and Secure Software Architecture
- Define and... For full info follow application link.