Senior Configuration Management Security Architect – CIS Benchmarks & Compliance Automation

Be Part Of A High-Performing Team

Join a global financial services organization committed to strengthening enterprise cybersecurity, improving operational resilience, and advancing security engineering through automation and standardized controls. The organization operates in a highly regulated environment where consistent security configurations, risk management, and audit readiness are critical to protecting technology infrastructure and supporting business operations.

This opportunity sits within an enterprise Engineering & Automation transformation initiative focused on modernizing endpoint security, establishing consistent configuration standards, and reducing manual compliance processes. The team collaborates across North America, Europe, and Asia-Pacific, bringing together security architects, engineers, technology operations, risk and compliance specialists, and business stakeholders to implement sustainable security improvements.

What's In Store For You

• Remote opportunity – United States only, as specified in the latest requisition comments. The formal posting also lists hybrid, so the final work arrangement requires confirmation.
  

• Engagement: W2 only (no C2C/1099).
  

• Contribute to a global cybersecurity transformation initiative focused on enterprise configuration management and automated compliance.
  

• Work across cybersecurity architecture, engineering, governance, risk management, and technology operations.
  

• Help establish scalable security standards and automation capabilities across a complex international technology environment.
  

• Participate in initiatives involving security tool consolidation, continuous compliance monitoring, and operational security improvements.
  

How You Will Make An Impact

• Lead the development and implementation of enterprise secure configuration standards aligned with CIS Benchmarks and established cybersecurity frameworks.
  

• Design and improve configuration management architecture to strengthen security consistency across endpoints and enterprise technology environments.
  

• Develop and implement automated compliance validation processes that identify configuration deviations, security gaps, and policy violations.
  

• Advance policy-as-code practices to improve the consistency, repeatability, and scalability of security configuration enforcement.
  

• Establish processes for detecting configuration drift, evaluating exceptions, tracking remediation activities, and maintaining ongoing compliance.
  

• Collaborate with security engineering and technology operations teams to integrate secure configuration requirements into existing operational workflows.
  

• Strengthen audit readiness by developing reliable compliance evidence, control documentation, and reporting capabilities that support internal audit and regulatory expectations.
  

• Evaluate existing security and configuration management tools, identify overlapping capabilities, and support technology rationalization initiatives.
  

• Partner with cybersecurity, risk, compliance, procurement, finance, and technology stakeholders to align technical security improvements with enterprise governance requirements.
  

• Drive initiatives from initial assessment and architectural recommendations through implementation, validation, documentation, and sustainable operational adoption.
  

Requirements

Do You Bring Proven Success in Enterprise Security Configuration Management and Compliance Automation?

• 5–7 years of relevant experience in cybersecurity architecture, security engineering, configuration management, or related enterprise security disciplines.
  

• Strong hands-on experience implementing secure configuration standards and security hardening practices across enterprise technology environments.
  

• Demonstrated expertise with CIS Benchmarks, including assessing configuration compliance, identifying gaps, and implementing remediation strategies.
  

• Experience designing or supporting automated security compliance validation and configuration monitoring capabilities.
  

• Knowledge of policy-as-code principles and automated security control enforcement.
  

• Strong understanding of configuration drift detection, exception management, security remediation, and ongoing control validation.
  

• Experience supporting security governance, risk management, regulatory compliance, and internal audit requirements.
  

• Ability to develop technical security standards, implementation guidance, and audit-supporting documentation.
  

• Experience evaluating security tools and identifying opportunities to simplify, consolidate, or improve enterprise security capabilities.
  

• Understanding of cybersecurity architecture principles and the integration of security controls into enterprise technology operations.
  

• Strong analytical and problem-solving skills with the ability to translate security requirements into practical technical solutions.
  

• Excellent communication and stakeholder management skills, particularly when coordinating across engineering, operations, security, and compliance teams.
  

• Ability to independently manage technical initiatives, influence decisions, and drive measurable security improvements across geographically distributed teams.