DescriptionEnterprise Products Partners L.P. is one of the largest publicly traded partnerships and a leading North American provider of midstream energy services to producers and consumers of natural gas, NGLs, crude oil, refined products and petrochemicals. Our services include: natural gas gathering, treating, processing, transportation and storage; NGL transportation, fractionation, storage and import and export terminals; crude oil gathering, transportation, storage and terminals; petrochemical and refined products transportation, storage and terminals; and a marine transportation business that operates primarily on the United States inland and Intracoastal Waterway systems. The partnership's assets include approximately 50,000 miles of pipelines; 260 million barrels of storage capacity for NGLs, crude oil, refined products and petrochemicals; and 14 billion cubic feet of natural gas storage capacity.
The Cybersecurity Architecture Manager will work as part of the IT Security & Compliance organization to define, govern, and oversee the organization's cybersecurity architecture, ensuring security designs are aligned with business strategy, risk tolerance, and regulatory requirements. The ideal candidate will serve as a subject matter expert in cybersecurity architecture and provide leadership over security design standards, reference architectures, and architectural review processes across infrastructure, applications, cloud, data, and endpoint environments. This person will partner closely with security engineering, IT infrastructure, application development, risk, compliance, and business teams to guide architectural decisions, ensure consistent implementation of security controls, and balance security requirements with operational needs. They will also collaborate across the organization to mature security architecture governance, influence technology roadmaps, and establish scalable, repeatable security patterns that strengthen the company's overall security posture. Other responsibilities include, but are not limited to:
- Lead and oversee the enterprise cybersecurity architecture program, including security reference architectures, design standards, and architecture governance across infrastructure, applications, cloud, data, and endpoint environments.
- Provide direction and governance for security architecture-related initiatives, ensuring alignment with business strategy, risk tolerance, and applicable regulatory and industry requirements.
- Own and maintain cybersecurity architecture processes, standards, design patterns, and documentation artifacts to ensure consistency and scalability across the organization.
- Oversee and facilitate security architecture reviews for new and existing solutions, guiding teams to identify security design gaps and drive risk-appropriate remediation.
- Partner with security engineering, infrastructure, application development, and cloud teams to ensure security controls are incorporated into roadmaps and implemented consistently across platforms and projects.
- Define, track, and improve architecture governance metrics (e.g., review throughput, exceptions, recurring design issues), and provide visibility to leadership on architecture risk trends and priorities.
- Identify opportunities for improvement and drive enhancements to the maturity of the security architecture function, including standardizing patterns for common use cases and improving reusability across teams
- Develop and champion automation and efficiency initiatives related to architecture reviews, security-by-design guardrails, and repeatable secure configuration patterns.
- Serve as an escalation point for material security architecture decisions, design exceptions, and high-risk findings, coordinating resolution across security, IT, and business stakeholders.
- Ensure adherence to change management policies and governance standards, with particular focus on maintaining security architecture integrity during major system changes, deployments, and enterprise initiatives.
- Guide and mentor architects and team members (and influence peer technology leaders) on security architecture best practices, emerging threats, and secure design principles.
- Drive collaboration with risk and compliance partners to ensure architectural standards support audit readiness and regulatory expectations without sacrificing practicality and speed of delivery.
- Other projects as assigned
QualificationsThe successful candidate will meet the following qualifications:
- College or technical school degree is preferred.
- Relevant security certifications are preferred (e.g., CISSP, CISM, CCSP; cloud security certifications a plus).
- Substantial knowledge and experience in the architecture, design, and governance of the following:
- Enterprise cybersecurity architecture across multiple domains (application, database, endpoint, network, cloud, and data security).
- Security architecture review practices, including identifying security design gaps and recommending changes to mitigate threats.
- Security policies, standards, and secure design patterns aligned with regulatory and industry best practices.
- Extensive background in IT infrastructure and applications, with the ability to guide secure design decisions across both.
- Experience working in medium to large-scale, enterprise environments with complex systems, integrations, and security control requirements.
- 10+ years of applicable professional experience that substantially includes the following:
- Cybersecurity architecture and secure solution design across multiple security domains.
- Development and enforcement of security architecture standards, reference architectures, and technical guidance for delivery teams.
- Leading or governing architecture reviews, including documenting current-state architecture and driving recommendations for improvement.
- 3+ years of experience in a leadership capacity, including formal people leadership or architecture governance leadership, mentoring architects/engineers, and influencing senior stakeholders.
- Experience with cloud security architecture (AWS and/or Azure) and modern security architectures is preferred.
- Strong ability to create documentation of processes, guidelines, standards, and technical specifications, including network and system architecture diagrams.
- Self-motivated and able to work with limited supervision while leading cross-functional outcomes.
- Strong program and project leadership skills, with the ability to communicate architecture tradeoffs in clear business terms.
- Strong organization and time management skills, with the ability to manage multiple concurrent initiatives and priorities.
- Excellent analytical, troubleshooting, and problem-solving skills related to complex security design challenges.
- Ability to work and contribute to a team environment to accomplish overall security objectives while partnering effectively with IT and business teams.
Never miss an opportunity! Create an alert based on the job you applied for.
