Director, Security Architecture

About the role

PMI is transforming its business toward smoke-free products and is looking for a Director of Security Architecture within its Enterprise Technology & Information Security organization. You will lead a team of security architects and set the strategic direction of security architecture across a complex global technology landscape, working with business and technology leaders so that security is embedded in enterprise platforms, major initiatives and emerging technologies such as AI.

Key responsibilities

• Lead and develop a team of Senior and Principal Security Architects, setting priorities, standards and accountability while developing and retaining talent.
• Own and evolve the enterprise security architecture strategy, operating model and multi-year roadmap across AI, IAM, data, cloud, infrastructure, endpoint, network, OT and cyber defense.
• Translate business strategy, threats and risk appetite into architecture priorities, target states and investment recommendations.
• Govern the security architecture framework, including principles, standards, reference architectures, patterns, guardrails and decision records, consistently applied across IT and OT.
• Chair security architecture governance, resolve cross-domain conflicts and escalate material technology and cyber-risk matters.
• Drive execution of domain roadmaps with technology and business leaders, clarifying ownership and resolving dependencies.
• Provide security architecture leadership for strategic programs, platforms and major technology initiatives.
• Anticipate emerging technology and threats, including AI and frontier-AI risks, directing research and experimentation and turning findings into architecture and roadmap decisions.

Required profile

• 15+ years of progressive information security experience, including enterprise Security Architecture leadership in a large, global organization.
• Proven leadership of senior technical professionals, with a record of building high-performing teams and developing talent.
• Demonstrated ownership of enterprise security architecture, including strategies, target states, standards, reference architectures and multi-year roadmaps.
• Broad security architecture expertise across AI, IAM, data, cloud, infrastructure, endpoint, network, OT and cyber defense, with deep expertise in at least three domains.
• Proven ability to assess complex architectures through risk-based reviews, threat modeling, control patterns and residual-risk decisions.
• Exceptional executive communication and influencing skills in English, able to explain complex trade-offs and build cross-functional alignment.
• Strategic foresight on emerging technologies and threats, particularly AI security.
• Relevant university degree or equivalent experience.

Required skills

• Certifications: CISSP, CISM or CCSP expected; CISSP-ISSAP, SABSA or TOGAF an advantage.
• Security architecture across AI, IAM, data, cloud, infrastructure, endpoint, network, OT and cyber defense.