Head of Cyber Security Architecture & Engineering

Job Description:

Head of Cybersecurity Architecture and Engineering

Collaborate with Innovative 3

Mers Around the World

Choosing where to start and grow your career has a major impact on your professional and personal life, so it’s equally important you know that the company that you choose to work at, and its leaders, will support and guide you. With a wide variety of people, global locations, technologies and products, 3M is a place where you can collaborate with other curious, creative 3

Mers.

This position provides an opportunity to transition from other private, public, government or military experience to a 3M career.

The Impact You Will Make in this Role

The Head of Cybersecurity Architecture & Engineering is responsible for leading the design, development, and implementation of the organization’s cybersecurity architecture and engineering strategies. This role ensures that security principles are embedded into all IT and business initiatives, protecting the company’s assets, data, and infrastructure against evolving cyber threats and in compliance with regulatory standards such as CMMC, ISO 27001, NIST CSF, NIS2, and industry-specific frameworks (TOGAF, SABSA).

Here, you will make an impact by:

Leadership & Team Management

• Build, mentor, and lead a team of cybersecurity architects and engineers, fostering a culture of innovation and continuous improvement.
• In collaboration with the security awareness team, provide guidance and training on security best practices to IT teams, developers, and business units.
• Act as a senior advisor to executives and key stakeholders on cybersecurity risks and strategies.

Cybersecurity Architecture & Strategy

• Develop and maintain a comprehensive cybersecurity architecture framework that aligns with business objectives and regulatory requirements.
• In collaboration with the IT Governance, Risk, and Compliance (GRC) team, develop and implement technical standards and best practices to ensure compliance with IT policies and control objectives for enterprise IT, cloud, and emerging technologies. This includes specifying configurations, protocols, and procedures that align with these policies and objectives.
• Provide strategic direction on security infrastructure, identity management, data protection, and threat mitigation techniques. This includes defining architectural standards and patterns, and incorporating threat modeling into reference architecture.
• Collaborate with IT and business teams to integrate security into cloud, Dev Ops, data, and application architecture. Define security controls for emerging technologies including AI, IoT.

Security Engineering & Technology Implementation

• Oversee the design, deployment, and maintenance of security technologies, including firewalls, intrusion detection systems, endpoint protection, encryption, and cloud security controls.
• Lead security technology evaluations and recommend solutions to enhance the organization’s security posture.
• Ensure security tools and processes integrate seamlessly with IT and Dev Ops environments.

Risk Management & Compliance

• Collaborate with risk management teams to assess and mitigate cybersecurity risks across the organization.
• Ensure architecture designs and related implementations follow the appropriate regulatory frameworks and industry standards such as NIST, ISO 27001, GDPR and PCI-DSS.
• Work closely with internal and external auditors to address security gaps and remediate vulnerabilities.

Threat Intelligence & Incident Response Support

• Collaborate with security operations teams to enhance threat intelligence, detection, and response capabilities.
• Support incident response efforts by providing architectural insights and forensic analysis recommendations.
• Support the adoption of automation and AI-driven security technologies to improve threat detection and response.

Your Skills and Expertise:

To set you up for success in this role from day one, 3M requires (at a minimum) the following qualifications:

• Bachelor’s degree or higher (completed and verified prior to start).
• Ten (10) years of experience in Cybersecurity in a private, public, government, or military environment.
• Three (3) years in a vulnerability…