Join the transformative team at City of Hope, where we''re changing lives and making a real difference in the fight against cancer, diabetes, and other life-threatening illnesses. City of Hope's growing national system includes its Los Angeles campus, a network of clinical care locations across Southern California, a new cancer center in Orange County, California, and treatment facilities in Atlanta, Chicago and Phoenix. Our dedicated and compassionate employees are driven by a common mission: To deliver the cures of tomorrow to the people who need them today.
The Principal Enterprise Cybersecurity Architect serves as City of Hope's senior technical authority for enterprise cybersecurity architecture, defining and advancing security architecture, engineering standards, and control frameworks across clinical, research, business, and technology environments. This highly influential role translates cybersecurity strategy, regulatory obligations, and enterprise risk priorities into practical architectures spanning on-premises, multi-cloud, and hybrid platforms. You'll provide authoritative guidance across Zero Trust, microsegmentation, cloud security, AI governance, vulnerability management, incident readiness, and third-party risk while partnering across the organization to embed security throughout the technology lifecycle.
As a successful candidate, you will:
- Define and evolve enterprise cybersecurity architecture, reference architectures, security standards, and technology roadmaps across network, endpoint, identity, application, data, cloud, and hybrid environments.
- Lead security architecture and engineering for Zero Trust, microsegmentation, multi-cloud security, workload and container protection, secure CI/CD, identity federation, privileged access, logging, and monitoring.
- Direct threat modeling, security design reviews, control assessments, penetration-testing oversight, vulnerability lifecycle management, and remediation planning.
- Lead enterprise cybersecurity risk assessments and translate legal, regulatory, audit, and policy requirements into actionable technical controls.
- Partner with GRC teams on control mappings, risk registers, exceptions, compensating controls, audit evidence, and remediation plans.
- Provide technical leadership for incident readiness and Cyber Operations/SOC collaboration, including logging, monitoring, alerting, forensic support, and security event management.
- Serve as a cybersecurity architecture liaison to governance bodies, technology leaders, business stakeholders, and vendors while producing architecture specifications, roadmaps, white papers, and executive presentations.
- Mentor security engineers and help drive continuous improvement and knowledge sharing.
- Conduct security due diligence for technology acquisitions, vendor evaluations, and M&A activities, and provide architectural guidance for the secure adoption of AI, machine learning, IoT, biomedical technologies, and other emerging capabilities.
Your qualifications should include:
- Bachelor's degree in Computer Science, Cybersecurity, Information Security, Management Information Systems, Computer Information Systems, Computer or Electrical Engineering, or a related field. Three additional years of relevant experience may substitute for the minimum education requirement.
- Nine or more years of progressive cybersecurity experience with significant depth in security architecture, security engineering, or both; alternatively, a master's degree and seven years of relevant experience.
- Demonstrated experience designing security controls across complex, multi-vendor enterprise environments and applying risk analysis, assessment, and management practices.
- Expert knowledge of enterprise security architecture, security engineering, risk management, and governance principles.
- Advanced understanding of technologies including SIEM/SOAR, DLP, IDS/IPS, endpoint protection, firewalls, vulnerability management, encryption, identity and access management, privileged access management, multifactor authentication, and cloud security.
- Strong knowledge of network, application/API, database, operating-system, container/Kubernetes, secure CI/CD, and IoT security.
- Working knowledge of HIPAA, HITECH, PCI, CMS requirements and frameworks including NIST, ISO, COBIT, ITIL, FIPS, and FISMA.
- Ability to translate complex technical, risk, and compliance requirements into clear security designs, decisions, standards, and executive-level recommendations.
- Strong communication, influencing, decision-making, organizational, and problem-solving skills, with the ability to lead complex cross-functional initiatives.
City of Hope employees pay is based on the following criteria: work experience, qualifications, and work location.
City of Hope is an equal opportunity employer.
To learn more about our Comprehensive Benefits, please CLICK HERE.
Please note: City of Hope is committed to a safe and transparent hiring experience. Please be aware that scammers may attempt to impersonate our organization through fake job postings, emails or interviews.
- Apply only through our official website or trusted partner platforms.
- City of Hope will never request payment or fees at any stage of the hiring process.
- We will not request sensitive personal or financial information prior to the acceptance of a formal offer.
- All communications will come from official @coh.org email addresses.
- Interviews are conducted only through approved, professional channels.
- Be cautious of unsolicited communications, urgent requests or opportunities that seem inconsistent with standard hiring practices.
- If you receive any suspicious communication, please report it to careers@coh.org.