Cybersecurity Program Architect

The Cybersecurity Program Architect at Direct Companies defines and advances cybersecurity strategy across IT and OT, developing governance frameworks and risk assessment methodologies while delivering actionable roadmaps with executive-level communication.

Responsibilities

• Create and sustain cybersecurity strategies, reference frameworks, standards, and roadmaps for both IT and OT environments.
• Specify security control requirements and collaborate with technical teams to enable effective implementation.
• Develop and maintain structured cybersecurity risk models and assessment methodologies.
• Translate cybersecurity risks into clear business impacts and practical recommendations.
• Provide consistent risk reporting, visibility, and executive-level communication.
• Lead cybersecurity components within IT Strategic Planning engagements (ITSP).
• Offer strategic security guidance to clients, stakeholders, and leadership teams.
• Develop and maintain cybersecurity policies, standards, governance structures, and compliance documentation.
• Support audit readiness and alignment with industry frameworks and regulatory requirements.
• Collaborate with technical and leadership teams to ensure alignment between cybersecurity strategy, execution, and organizational objectives.

Requirements

• Bachelor’s degree in cybersecurity, information technology, engineering, business, or related field preferred.
• Experience building cybersecurity programs, frameworks, policies, and governance structures.
• Strong understanding of cybersecurity frameworks such as NIST CSF, CIS Controls, ISO 27001, and IEC 62443.
• Ability to assess cybersecurity risk and communicate technical concepts in business terms.
• Experience developing strategic roadmaps and guiding organizations through cybersecurity maturity improvements.
• Strong communication and presentation skills with executive and stakeholder audiences.
• Ability to collaborate across technical teams, leadership teams, and client organizations.
• A passion for helping organizations improve security posture and operational resilience.

Technologies

Key frameworks: NIST CSF, CIS Controls, ISO 27001, IEC 62443.

Benefits

• Competitive compensation
• Health, dental, and vision insurance
• 401(k) with company match
• Paid time off (PTO) and holidays
• Life and disability insurance
• Career growth and professional development
• Industry certifications and continuing education support

About Direct Companies in Sioux Falls

Direct Companies is a growing leader in automation, IT, and fabrication services, dedicated to helping clients succeed through custom-built solutions. Headquartered in Sioux Falls, we pride ourselves on building a culture of collaboration, creativity, and continuous learning.

Our people-first mindset fuels everything we do, and we seek a candidate who shares that drive to innovate and elevate.

Why join us

This position is well suited for individuals who want to shape cybersecurity strategy, influence security programs, and guide leadership teams, while helping clients build resilient, business-aligned cybersecurity practices. The role offers the opportunity to influence security programs and contribute to the success of diverse client engagements.