GuidePoint Security logo
GuidePoint Security

We help organizations make smarter cybersecurity decisions that minimize risk.

Principal, Security Alignment

Security EngineerSecurity EngineerFull TimeRemoteLeadTeam 201-500H1B SponsorCompany SiteLinkedIn

Location

United States

Posted

1 day ago

Salary

0

Seniority

Lead

Job Description

Principal, Security Alignment

GuidePoint Security

Role Description The Principal, Security Alignment reports directly to the Chief Information Security Officer (CISO) and serves as the primary security advisor and strategic partner between Corporate Information Security and regional business operations. The organization operates a federated business model where corporate functions establish enterprise capabilities, standards, and guardrails while regional teams maintain autonomy in executing their business objectives. This role exists to ensure regional execution aligns with enterprise security expectations while enabling business velocity and operational flexibility. The Principal, Security Alignment will partner with regional leadership teams to understand: - Business processes - Professional services delivery models - Customer commitments - Internally developed solutions - Data handling practices - Operational workflows Success requires the ability to operate as a trusted business advisor — influencing without direct authority, translating security requirements into practical business outcomes, and helping regions mature without creating unnecessary friction. Qualifications - 10+ years of experience in information security, risk management, technology leadership, consulting, or business operations. - Experience operating in federated, decentralized, or matrixed organizations. - Strong understanding of enterprise security governance, risk management, and operational controls. - Experience partnering with executive business stakeholders. - Ability to influence teams without direct reporting authority. - Experience translating security concepts into business outcomes. - Strong executive communication and reporting skills. Requirements - Establish trusted relationships with regional executives and operational leaders. - Serve as the primary security advisor connecting regional business operations with the Enterprise Information Security organization. - Understand regional priorities, customer requirements, delivery practices, and operational challenges. - Help regional teams interpret and operationalize enterprise security standards. - Ensure security considerations are incorporated into regional decision-making processes. - Assess regional business practices to identify potential security, privacy, compliance, and operational risks. - Evaluate areas including: - Professional services delivery practices - Customer data handling - Customer environment access - Internally developed tools and automation - AI adoption and usage - Third-party/vendor usage - Data movement and storage practices - Customer contractual security obligations - Identify inconsistencies between regional execution and enterprise expectations. - Develop a scalable governance model that balances corporate oversight with regional autonomy. - Define clear ownership expectations between corporate security and regional leadership. - Create visibility mechanisms that allow risks to be identified proactively. - Establish regional security operating rhythms, reporting, and accountability structures. - Ensure exceptions, deviations, and business-driven decisions are documented and understood. - Provide the CISO with ongoing visibility into regional security maturity, emerging risks, and operational trends. - Develop executive-level reporting around: - Regional alignment - Key risk indicators - Security maturity - Remediation progress - Areas requiring leadership escalation - Escalate material concerns where business practices create unacceptable enterprise risk. - Identify opportunities to simplify adoption of corporate security capabilities. - Reduce friction between security requirements and regional execution. - Create reusable playbooks, processes, and frameworks. - Promote consistency without eliminating appropriate regional flexibility. - Build a culture where security is viewed as a business enabler. First Six-Month Objectives - Complete security/business assessments across all eight regions. - Establish relationships with regional leadership teams. - Create a regional security maturity baseline. - Identify high-priority risks and improvement opportunities. - Define the corporate/regional responsibility model. - Establish recurring governance and reporting cadence. - Implement regional security scorecards. - Deliver a prioritized roadmap for long-term maturity. Benefits - Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions). - Group Medical Insurance options: - Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans). - High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans). - Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans. - 12 corporate holidays and a Flexible Time Off (FTO) program. - Healthy mobile phone and home internet allowance. - Eligibility for retirement plan after 2 months at open enrollment. - Pet Benefit Option.

Related Categories

Related Job Pages

More Security Engineer Jobs

Capco logo

Safety Technician

Capco

Capco, a Wipro company, is a management & technology consultancy dedicated to the financial services & energy industries

Full TimeRemoteTeam 1,001-5,000Since 1998H1B Sponsor

Role Description - Serviços técnicos especializados na Gestão de anomalias de segurança; - Serviços técnicos especializados de assessorias técnicas, avaliações, auditorias, e inspeções de segurança do trabalho nas instalações terrestres e marítimas; - Serviços técnicos especializados de gestão e execução de programas de treinamento de segurança do trabalho; - Serviços técnicos especializados no apoio à Gestão de Contratação de Fornecedores; - Serviços especializados de gestão de contingências; - Serviços especializados de segurança ocupacional e operacional; - Serviços especializados de gestão de indicadores e desempenho. Qualifications - Mínimo de 3 anos de experiência após formação em Técnico de Segurança do Trabalho, atuando na área de segurança do trabalho em empresas do setor de Óleo & Gás (evidência em CTPS). - Nível técnico em Segurança do Trabalho incluindo registro no órgão de classe em consonância com a Lei 7.410, de 27 de novembro de 1985. - Pacote Office (Word, Excel e Power Point) Intermediário / Avançado. Requirements - Conhecimento de Análise Crítica. - Power BI. Benefits - Cultura inclusiva que valoriza a diversidade em todas as suas expressões. - Ações diversas de inclusão e de responsabilidade social através de comitês internos geridos pela nossa comunidade interna. - Grupos de apoio como Mulheres, Pessoas Com Deficiência, Pessoas Negras, LGBTQIAPN+, Parentalidade, Gerações, entre outros. Next Steps Se você está ansioso(a) para progredir sua carreira conosco, candidate-se e aguarde o contato de um de nossos recrutadores!

Brazil
Full TimeRemoteTeam 1,001-5,000Since 2002H1B No Sponsor

• Assess architectures, solutions, integrations, data flows and technical designs from a security perspective. • Define recommendations for controls, standards, minimum requirements and architectural best practices. • Support squads, strategic projects and initiatives in adopting security by design. • Participate in technical forums, guilds and corporate architecture discussions. • Align security requirements across privacy, continuity, identity, applications, cloud and infrastructure. • Support decisions on technologies, standards, exceptions, residual risks and mitigating alternatives. • Contribute to policies, technical standards, reference architectures and control catalogs.

Brazil
Zscaler logo

Specialist Account Executive, Data Security – Majors

Zscaler

We make it easy to secure your cloud transformation. Get fast, secure, and direct access to apps without appliances.

Full TimeRemoteTeam 5,001-10,000Since 2008H1B Sponsor

• Serve as the primary specialist for customers, partners, and internal teams to drive revenue growth across the data security product portfolio • Partner with domain-expert solution engineers to capture customer requirements and craft compelling value propositions that close complex business deals • Own the regional quota and territory achievement by building and implementing account-based strategies to land and expand data security solutions • Collaborate synergistically with primary sales teams and leadership to ensure a unified and effective Zscaler presence in the market • Engage stakeholders across the organization, selling effectively to both C-suite executives and technical practitioners

United States
$13.3K - $190K / year
Sheetz, Inc logo

Security Engineer II

Sheetz, Inc

Sheetz is committed to the full inclusion of all qualified individuals. Sheetz is committed to considering all applicants regardless of disability who can perform all essential job duties with or without accommodations.

Full TimeRemoteTeam 10,001

Role Description This role qualifies for a remote work arrangement within our 7 state footprint (PA, OH, MI, WV, VA, MD, NC). Leads engineering efforts for enterprise-wide security initiatives and provides technical leadership in the design, architecture, and implementation of secure solutions. Responsible for translating business and risk requirements into scalable, resilient security capabilities, while influencing standards, driving technical direction, and ensuring security is embedded across platforms, applications, and infrastructure. Responsibilities - Design, engineer, and implement new security solutions that address complex enterprise risks while aligning with architectural standards and business objectives. - Lead technical evaluations, proof-of-concepts, and vendor assessments to select security technologies that meet functional, scalability, and risk management requirements. - Perform advanced troubleshooting and lead incident response activities, including root cause analysis, remediation planning, and post-incident improvements. - Develop and maintain automation scripts and tooling to improve security platform operations, efficiency, consistency, and response times. - Own and drive the lifecycle management and roadmap planning for assigned security tools, including upgrades, integrations, and decommissioning. - Serve as a subject matter expert (SME) across multiple security domains and technologies, providing guidance and technical direction to stakeholders and project teams. - Partner with compliance, risk, and audit teams to support internal and external audits, security reviews, and control validation activities. - Lead the technical execution of security projects, including solution design, implementation oversight, testing, and transition to operations. - Collaborate closely with enterprise architects, infrastructure, application, and cloud engineering teams to ensure security is integrated into designs and delivery processes. - Mentor and coach junior engineers by sharing expertise, reviewing designs, and promoting secure engineering best practices. - Participate in an on-call rotation to provide evening and weekend support as needed. As Sheetz operates 24/7/365, internal and external customers may require support at any time. Qualifications - Bachelor’s degree in Computer Science, Engineering or related field required. - Minimum 2 years cyber security experience required. - Minimum 1 year cyber security engineering experience required. - Previous experience with security solutions such as DLP, EDR, PKI, Password/Secret management, SEIM & SOAR required. - Previous exposure to utilization of IP, TCP/IP, and other network administration protocols required. - Previous exposure to utilization of Windows and Linux systems required. - Previous experience with security incident response preferred. - Previous experience with SSPM (SaaS Security Posture Management) preferred. - Previous experience with SaaS hardening and configuration management preferred. - Maintain a continuous personal professional development program; this level requires at least 1 cybersecurity certification and commitment to pursue additional cybersecurity certifications. - Examples of certifications include: - CompTIA CySA+ (Cybersecurity Analyst): Validates skills in threat detection, analysis, and incident response. - CompTIA Security+: Establishes a strong foundation in core cybersecurity principles. - Certified Ethical Hacker (CEH): Demonstrates knowledge of attack methodologies and defensive countermeasures (Preferred), or equivalent foundational security certification. - General Office Equipment. Accommodations Sheetz is committed to the full inclusion of all qualified individuals. Sheetz is committed to considering all applicants regardless of disability who can perform all essential job duties with or without accommodations.

United States