Executive Director Application Security Architect

Executive Director Of Security Architecture

Required Skills & ExperienceMust Haves 10+ years of progressive experience within cybersecurity, application security, software engineering, or security architecture. Previous hands-on experience as an Application Developer, Software Engineer, Application Architect, or similar engineering-focused role. Strong expertise in Application Security, Secure Software Development Lifecycle (SSDLC), and DevSecOps. Experience designing, implementing, or maturing DevSecOps pipelines and secure development practices. Ability to review source code and application architectures to identify vulnerabilities, security weaknesses, and architectural risks. Deep understanding of secure coding principles, threat modeling, authentication, authorization, and API security. Experience designing and implementing Zero Trust security principles. Strong understanding of cloud security concepts across AWS and Azure environments. Working knowledge of network security, identity and access management, data security, and governance principles. Experience with SAST, DAST, application testing, and code security assessment tools. Ability to communicate effectively with developers, architects, engineers, and executive stakeholders. Strong leadership presence with the ability to influence and drive security decisions across multiple teams. Experience deploying and supporting applications in production environments. Ability to balance business objectives with security requirements while driving secure engineering outcomes.

Nice to Have Skills & ExperiencePlusses Experience leading security architecture programs within large enterprise environments. Experience supporting media, entertainment, or content-driven organizations. Familiarity with NIST, ISO 27001, OWASP, SAFECode, PCI DSS, TPN, and Motion Picture security frameworks. Experience implementing privacy-by-design and security-by-design programs. Exposure to AI security initiatives and secure AI application development. Experience partnering with global engineering organizations and distributed development teams.

Job DescriptionInsight Global is seeking an experienced Executive Director of Security Architecture for one of our enterprise entertainment clients. This individual will serve as a strategic and hands-on leader responsible for advancing the organization's application security posture through secure architecture, DevSecOps, data security, and cloud security initiatives. This role requires someone who can effectively bridge the gap between software engineering and cybersecurity. The ideal candidate started their career in application development, software engineering, or application architecture before transitioning into security and can confidently engage with developers, architects, and executive leadership alike. Success in this position will come from the ability to influence engineering teams, establish enterprise security standards, and embed security into the software development lifecycle from the ground up rather than after applications have already been built. The position will function as a shared security architecture resource across multiple business units, partnering closely with engineering leadership, cybersecurity teams, and global stakeholders to drive secure-by-design and privacy-by-design practices throughout the organization.

Day-to-Day Responsibilities Lead the development and execution of enterprise-wide application security architecture strategies across application, cloud, and data environments. Serve as a trusted advisor to engineering leaders, architects, developers, and executives on secure application design and implementation. Review application architectures, source code, and technical designs to identify security gaps and recommend remediation strategies. Partner with development teams to embed security controls into applications from the earliest design phases through production deployment. Champion and evangelize DevSecOps practices, secure coding standards, and security-by-design principles across the organization. Define and standardize application security patterns, security architectures, DevSecOps pipelines, and technical security standards. Lead security architecture reviews for custom-developed applications, APIs, mobile applications, web applications, and commercial off-the-shelf solutions. Evaluate threats, vulnerabilities, and architectural risks within existing and proposed systems and develop practical mitigation strategies. Collaborate with application development, infrastructure, cloud, and security teams to align security requirements with business objectives. Guide teams on secure authentication, authorization, credential management, API security, and data protection practices. Evaluate and recommend emerging security technologies, tools, and AI-driven security solutions. Participate in enterprise security initiatives and provide architecture guidance for high-priority, cross-functional projects. Develop and maintain security standards, framework mappings, reference architectures, and governance documentation. Engage with senior engineering and business leadership to drive adoption of security best practices and influence secure technology decisions.