Director, Security Architecture and Engineering

CFA Institute is the global leader in investment excellence and ethics, and they are seeking a Director of Security Architecture and Engineering. In this role, you will lead the design and implementation of security architecture, drive modernization initiatives, and influence strategic technology decisions across the organization.

Responsibilities:

• Lead the transformation of security architecture and engineering capabilities, elevating organisational maturity across cybersecurity and infrastructure
• Drive delivery of key initiatives, including major cybersecurity and technology programs, ensuring projects reach clear, successful outcomes
• Oversee cloud and infrastructure environments (Azure, AWS), application support, and security engineering practices
• Translate enterprise security strategy into actionable roadmaps, standards, and implementation plans
• Embed secure-by-design and DevSecOps principles across systems, platforms, and workflows
• Champion automation to improve efficiency, scalability, and operational effectiveness
• Lead, coach, and develop a high-performing leadership team (3–5 direct reports) across security engineering, NOC, and help desk functions
• Strengthen operational performance, particularly within global support functions, driving accountability and service improvement
• Build strong cross-functional partnerships to align stakeholders and create shared ownership of outcomes
• Establish and track KPIs to measure success and continuously improve delivery and processes
• Provide technical leadership on emerging threats, technologies, and best practices

Requirements:

• Significant leadership experience managing and scaling technical teams (typically 10+ people over multiple years)
• Proven ability to deliver complex cybersecurity and infrastructure initiatives—not just design them
• Strong background in cloud engineering and security (AWS, Azure) and modern infrastructure environments
• Deep expertise across key security domains (e.g. IAM, network security, monitoring, encryption, cloud security, A/V, Mobility)
• Experience driving automation and process improvement within engineering or security functions
• A collaborative leadership style that builds alignment, influence, and trust across teams
• Strong communication skills with the ability to translate technical concepts into business outcomes
• Experience operating in environments undergoing transformation or change
• Knowledge of frameworks such as NIST or ISO 27001 are beneficial but optional
• Relevant certifications (e.g. CISSP, CISM, cloud security) are beneficial but optional