Information Security Architect

Location:  Mettawa, IL

Workplace Category: Hybrid

Travel Required:  No

Direct Reports:  No

Pay Range:  $118,400 - $174,000

Visa Sponsorship: Applicants must be currently authorized to work in the United States.  This position is not eligible for employment visa sponsorship now or in the future.  

Relocation:  Ability to travel domestically and internationally up to 20% as business needs require.

Innovation is the heart of Brunswick.  See how your contributions will help transform vision into reality: 

Position Overview:  

As part of the talented Information Security Engineering team, you will be responsible for protecting Brunswick Corporation, its subsidiaries, employees, products, customers, and digital assets from evolving security threats. The Security Architecture team partners across the enterprise to identify risk, design secure solutions, and ensure security is integrated into business and technology initiatives from concept through deployment.

As a Security Architect, you will serve as a trusted advisor to technical and business stakeholders, helping shape the secure future state of Brunswick’s global technology ecosystem. This role requires strong collaboration across infrastructure, cloud, application development, networking, identity and access management, product engineering, operational technology, and business teams.

Success in this position requires a strong understanding of security architecture principles, risk management, cloud technologies, enterprise infrastructure, and emerging technologies. This role is responsible for evaluating proposed solutions, identifying security risks, recommending appropriate controls, and ensuring security requirements are embedded within enterprise technology initiatives.

You will work closely with business leaders, architects, engineers, project teams, and third-party partners to help Brunswick maintain a secure, scalable, and resilient technology environment while enabling innovation and business growth.

At Brunswick, we have passion for our work and a distinct ability to deliver.   

Essential Functions:   

• Lead the design and development of secure enterprise architecture solutions aligned with business objectives and security strategy.

• Establish and maintain Security Architecture standards, patterns, principles, and reference architectures across the organization.

• Conduct security architecture reviews for new and existing technology solutions, identifying risks and recommending appropriate mitigating controls.

• Participate in Architecture Review Board (ARB) and solution design review processes, providing security oversight, evaluating proposed solutions against security standards and architectural principles, identifying risks, recommending mitigating controls, and tracking remediation activities to closure.

• Collaborate with business and technology teams to review, challenge, and influence high-level and detailed solution designs, ensuring security requirements are incorporated throughout the design process.

• Partner with infrastructure, cloud, engineering, product development, and operational technology teams to ensure security requirements are integrated into technology solutions.

• Perform threat modeling, attack surface analysis, and risk assessments throughout project lifecycles.

• Develop and maintain security architecture documentation, including policies, standards, procedures, reference architectures, design patterns, technical specifications, and guidance materials.

• Provide architectural guidance across multiple security domains, including identity and access management, cloud security, network security, endpoint security, application security, data protection, Artificial Intelligence (AI), and emerging technologies.

• Create and maintain security architecture specifications and reference designs supporting enterprise-wide initiatives.

• Support and promote Secure by Design, Zero Trust, and defense-in-depth principles throughout the organization.

• Provide security guidance for the evaluation, adoption, and governance of AI and Generative AI (GenAI) technologies, ensuring risks related to data protection, model security, and responsible use are appropriately managed.

• Evaluate emerging technologies and security solutions to determine enterprise applicability, security impacts, and business value.

• Support cloud adoption and modernization initiatives across Microsoft Azure (Azure), Amazon Web Services (AWS), Google Cloud Platform (GCP), and Oracle Cloud Infrastructure (OCI).

• Collaborate with Product Security, DevSecOps, Infrastructure, Cloud Operations, and Engineering teams to improve security maturity and reduce organizational risk.

• Develop security recommendations that balance risk reduction, operational efficiency, user experience, and business objectives.

• Track, analyze, and report on architecture review metrics, risk trends, technology adoption, and control effectiveness.

• Provide mentorship and security guidance to engineering, infrastructure, and project teams.

• Stay informed on emerging threats, industry trends, and evolving technologies to continuously improve Brunswick’s security posture.

Diversity of thought and experiences is fundamental when imagining the unimaginable. Certain skillsets/experiences are necessary; however, others can be developed along the way.  

Required Qualifications:   

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Engineering, or equivalent professional experience.

• 5+ years of experience in Information Security, Security Engineering, Infrastructure Engineering, Cloud Security, Network Security, or Security Architecture.

• Strong understanding of enterprise security architecture principles and security control frameworks.

• Experience designing and securing hybrid technology environments spanning on-premises and cloud infrastructures.

• Experience with enterprise security technologies, including:

• Endpoint Detection and Response (EDR)

• Identity Detection and Response (IDR)

• Security Information and Event Management (SIEM)

• Identity and Access Management (IAM)
  Network Security Controls

• Vulnerability Management Platforms
  Data Protection Technologies

• Experience with Cloud Security Posture Management (CSPM), Cloud Access Security Broker (CASB), Security Service Edge (SSE), and cloud-native security capabilities.

• Strong understanding of cloud security architectures and services within Azure, AWS, GCP, and OCI.

• Experience performing threat modeling, architecture reviews, and risk assessments.

• Knowledge of vulnerability management processes and technologies for identifying and reducing risk across enterprise environments.

• Broad understanding of enterprise infrastructure, including networking, identity services, endpoint technologies, virtualization, cloud services, SaaS platforms, and enterprise applications.

• Familiarity with AI, GenAI, and emerging AI technologies, including associated security, privacy, governance, and risk management considerations.

• Familiarity with security frameworks and standards, including:

• NIST Cybersecurity Framework (CSF)
• NIST 800-53
• CIS Controls
• ISO 27001
• OWASP
• Zero Trust Architecture Principles

• Experience working with teams to assess and reduce risk through architecture reviews, threat modeling, and collaborative whiteboarding exercises.

• Excellent written and verbal communication skills with the ability to communicate complex technical concepts to both technical and non-technical audiences.

• Strong analytical, problem-solving, facilitation, presentation, and storytelling skills.

• Ability to influence stakeholders and drive security outcomes without direct authority.

• Demonstrate ability to balance business objectives, operational requirements, and security risk.

• Open-minded approach with the flexibility to adapt to evolving technologies, business requirements, and security challenges.  

Preferred Qualifications:  

• Industry certifications such as CISSP, CCSP, Azure Security Engineer Associate, AWS Security Specialty, or equivalent certifications.

• Experience supporting DevSecOps initiatives and integrating security into CI/CD pipelines.

• Familiarity with application security practices and technologies, including:

• Static Application Security Testing (SAST)

• Dynamic Application Security Testing (DAST)

• Software Composition Analysis (SCA)

• API Security Testing

• Software Supply Chain Security

• Experience securing or governing AI and GenAI solutions, including AI-assisted development tools, Large Language Models (LLMs), data protection controls, prompt security, model security, and responsible AI practices.

• Experience with Zero Trust architecture and modern identity-centric security models.

• Knowledge of container security, Kubernetes, Infrastructure as Code (IaC), and cloud-native application architectures.

• Experience supporting Operational Technology (OT), Internet of Things (IoT), connected products, embedded systems, cyber-physical systems, or product security initiatives.

• Experience working within large, geographically distributed enterprise organizations.

• Experience presenting security risks, architectural recommendations, and strategic initiatives to senior leadership and executive stakeholders.

• Familiarity with enterprise architecture methodologies and governance frameworks.

• Experience evaluating emerging technologies, vendor solutions, and strategic technology roadmaps from a security perspective.