Director, Cybersecurity Architecture

Crowley Maritime Corporation is seeking a seasoned cybersecurity architecture leader to guide how security is designed, engineered, and operated across the enterprise. In this hybrid role based in Jacksonville, you will set direction for architecture standards and reusable patterns, while working closely with technology and business stakeholders to ensure secure technology delivery and readiness for commercial, government, regulatory, and contractual obligations.

What You’ll Do

• Own and maintain the cybersecurity architecture roadmap, coordinating priorities, dependencies, and milestones with enterprise technology roadmaps and business plans.
• Define and keep current security architecture principles, reference architectures, technical standards, control baselines, and reusable design patterns.
• Lead secure-by-design reviews through enterprise architecture and technology governance, ensuring security requirements and approved conditions are addressed before deployment.
• Coordinate cybersecurity architecture and engineering plans across Infrastructure, IT Operations, Applications, Data, Cloud, Enterprise Architecture, and other technology teams.
• Develop and manage budgets, forecasts, and business cases for architecture and engineering capabilities, tying investments to risk reduction, regulatory needs, resilience, and business outcomes.
• Translate cyber threats, vulnerabilities, and control gaps into business impact, options, and recommendations for executive and non-technical audiences.
• Provide architecture guidance across cloud, identity, network, endpoint, application, data, operational technology, IoT, and other connected environments.
• Define security acceptance criteria, required telemetry, and engineering requirements, partnering with delivery teams to implement, validate, and operationalize approved designs.
• Evaluate security technologies and services for business fit, alignment with architecture, risk reduction, supportability, cost, and integration requirements.
• Govern technical exceptions and security design debt, including documented rationale, compensating controls, accountable owners, and remediation plans.
• Lead the Security Operations Center and cybersecurity incident response capability, including monitoring, detection, investigation, containment, and recovery coordination, with threat intelligence and digital forensics support.
• Establish the SOC operating model, service expectations, response plans, playbooks, escalation paths, performance measures, and coordination processes with Technology, Legal, Risk, Communications, and business teams.
• Use operational findings, incidents, assessments, audits, and technology changes to improve security patterns and priorities.
• Lead, coach, and develop cybersecurity architects and engineers, building cross-functional communities of practice and reducing reliance on single individuals.
• Maintain relationships with business leaders, technology teams, Legal, Risk, vendors, customers, and government or regulatory stakeholders as appropriate.

Minimum Qualifications

• Bachelor’s degree in computer science, information systems, business, or a related field, or a combination of post-high school education and experience equal to nine (9) years.
• 10+ years of progressively responsible experience in cybersecurity, enterprise architecture, infrastructure, cloud, security operations, or related technology disciplines, including 5+ years of leadership experience.
• Proven experience leading or overseeing a Security Operations Center and major cybersecurity incident response, building security architectures and roadmaps, coordinating delivery across multiple technology teams, and presenting cyber risk and recommendations to executives and business audiences.
• Strong knowledge of enterprise security architecture and secure-by-design practices, including cloud and hybrid infrastructure; identity and Zero Trust; network, endpoint, application, and data security; encryption and key management; security monitoring and automation; and architecture threat modeling.
• Strong working knowledge of SOC operations, incident command, detection engineering, logging and telemetry, threat intelligence, vulnerability management, digital forensics, and incident response.
• Experience applying government and industry frameworks such as NIST, CMMC, ISO 27001, or comparable standards.
• One of the following certifications: CISSP, CISM, or CCISO.
• Ability to travel to participate in incident, regulatory, customer, or executive discussions when architecture expertise is required.
• Ability to translate cyber risk into clear business impacts, trade-offs, investment choices, and recommended actions.
• Effective communication with executives, business leaders, engineers, auditors, customers, and government stakeholders.
• Experience building practical roadmaps, budgets, and business cases that connect technology work to risk reduction and business outcomes.
• Capability to coordinate priorities, dependencies, and delivery commitments across multiple technology teams.
• Strong architecture judgment balancing security effectiveness, resilience, user experience, cost, and speed.
• Ability to influence across organizational boundaries and create alignment without relying solely on formal authority.
• Ability to convert requirements into reusable patterns rather than one-off solutions.
• Use of evidence, operational results, and measurable outcomes to adjust priorities and improve designs.
• Experience developing technical talent, cross-training, documentation, and succession coverage, while challenging designs constructively to reach an approved, supportable deployment path.

Preferred Background

• Experience in government, regulated, critical infrastructure, operational technology, maritime, or similarly complex environments.
• Familiarity with operational technology and critical-infrastructure security principles.

Technologies and Frameworks

• NIST, CMMC, ISO 27001
• Zero Trust
• CISSP, CISM, CCISO

Work Arrangement

• Hybrid

Benefits

• Competitive pay with recognition programs
• Comprehensive benefits: medical, dental, and vision insurance, life and disability coverage, and paid vacation and holidays
• Parental leave and sick leave
• Learning and growth with access to training and development
• Employee Assistance Program, wellness program, and gym membership discounts

Location: Jacksonville, FL (hybrid)