Principal Architect – IT Security | Enterprise Cybersecurity Risk & Compliance Specialist

Join arenaflex's Digital Innovation Team

Are you ready to be part of something extraordinary? At arenaflex, we believe that innovation drives progress and serves as the foundation for everything we do. Our Digital Technology team spans the globe, comprised of diverse individuals working together with cutting-edge technology to build the best aircraft in the history of aviation. We design, develop, and maintain highly scalable technology solutions that are rejuvenated with innovative designs, data analysis, and digital transformations.

We're not just creating technology—we're shaping the future of air travel and connecting millions of people around the world. As a Principal Architect – IT Security at arenaflex, you'll play a critical role in protecting our enterprise infrastructure while contributing to an organization that values diversity, innovation, and excellence. This is an opportunity to make a meaningful impact while growing your career in one of the most dynamic industries in the world.

About the Role

The Principal Architect – IT Security is a critical part of our Cybersecurity Risk and Compliance (CSR) division. You will be responsible for ensuring all Enterprise-class technology solutions are implemented and maintained according to security best practices and organizational requirements. You'll be the champion who advocates, designs, and implements processes and technology relating to information security, including security analysis and Blue/Purple team activities across the entire organization.

In this pivotal position, you'll collaborate with Information Technology teams and Audit/Risk groups to identify and prioritize risk components, helping implement appropriate controls that protect our digital assets. Your expertise will be instrumental in bridging the gap between cybersecurity and the broader business objectives, ensuring that security considerations are integrated into every aspect of our operations.

Key Responsibilities

• Provide Domain Expertise: Serve as the subject matter expert for various IT teams, Cybersecurity Groups, and Risk Oversight committees, offering strategic guidance on security architecture and implementation


• Policy Development: Recognize and identify potential areas where existing security policies and procedures require modification, or where new ones need to be developed, particularly regarding future business growth and emerging threats


• Security Implementation: Ensure that security policies of key systems are properly implemented, monitored, and reported on a continuous basis


• Risk Assessment: Conduct risk assessments on new and existing technologies, providing information risk management consulting to technology teams across the organization


• Technology Evaluation: Evaluate and recommend security software/hardware and its application to enhance our security posture


• Alternative Measures: Establish alternative safety measures when needed to address audit findings, known vulnerabilities, or disaster recovery efforts


• Security Awareness: Ensure technology teams are made aware of security engineering and architecture projects that could be incorporated into business solutions


• Incident Response: Lead security investigations and provide forensic services in response to security incidents, ensuring rapid and effective remediation


• Regulatory Compliance: Ensure compliance with local regulations, including local encryption regulations and privacy laws that affect our global operations


• Mobile Security Architecture: Develop comprehensive strategies to improve mobile security, optimize device management, and implement mobile application protections


• Policy and Standards: Contribute to Policy and Standards development as it relates to mobile security, organizing reporting processes for mobile security while ensuring alignment with industry-specific regulations and standards


• Team Education: Bridge the gap between cybersecurity and the wider organization by collaborating to endorse, communicate, and educate on mobile security controls, leading the oversight responsibility to ensure seamless and continuous execution of these controls


• Mobile Security Solutions: Demonstrate expertise in Mobile Device Management (MDM), Mobile Threat Defense (MTD), Mobile Runtime Application Self-Protection (RASP), and other mobile security solutions while seamlessly integrating them with a wide array of security and identity tools to establish a robust security ecosystem


• Threat Assessment: Conduct mobile threat assessments to identify vulnerabilities and risks specific to smartphones, applications, and networks

What We're Looking For

Minimum Qualifications

To succeed in this role, you'll need:

• Bachelor's degree in Information Security, Computer Science, or a related field


• 4+ years of IT or Cybersecurity experience in enterprise environments


• Well-rounded understanding of technology, operations, and key business processes


• Proven track record in strategically developing scalable programs encompassing individual devices, managed devices, and mobile applications


• Experience in policy and standards development related to mobile security


• Ability to bridge cybersecurity and the broader organization through effective collaboration, communication, and education


• Demonstrated expertise in Mobile Device Management (MDM), Mobile Threat Defense (MTD), Mobile Runtime Application Self-Protection (RASP), and other mobile security solutions


• Experience conducting mobile threat assessments to identify vulnerabilities specific to mobile devices, applications, and networks


• Strong organizational skills with the ability to manage multiple priorities


• Highly adaptable and prepared to respond to changing priorities and emerging threats


• Strong problem-solving and analytical abilities


• Excellent written and verbal communication skills


• Strong influencing and negotiation abilities

Technical Skills Required

• Information Risk Management


• Content filtering technologies


• Application firewalls


• Vulnerability scanners


• LDAP and Directory Services


• Forensics software


• Security incident response


• Federation Services


• CASB (Cloud Access Security Broker)


• XaaS Security


• OWASP Top Ten


• Operating Systems: Linux (Red Hat, SUSE), Windows (2000/XP/2003 Server), and UNIX


• Network: Firewalls, Proxy Servers, Reverse Proxy Servers, IPS, and SIEM

Preferred Qualifications

While these aren't required, they would strengthen your application:

• Master's degree in Information Security or related field


• Professional education in related technical/business areas


• Certified Enterprise Mobile Security Professional (CEMP)


• Certified Mobile Device Security Professional (CMDSP)

Why arenaflex?

At arenaflex, we believe that our people are our greatest asset. We're committed to creating an inclusive workplace where diverse experiences, perspectives, and backgrounds are valued. We encourage every individual who meets the minimum qualifications to apply—even if you don't feel you check all the boxes! We're always looking for individuals who will bring something new to the table.

Comprehensive Benefits Package

We care about your wellbeing, which is why we offer a comprehensive benefits package that supports you both professionally and personally:

• Health and Wellness: Complete medical, dental, and vision coverage plans. Employee assistance programs for mental health support. Wellness programs and resources to help you thrive.


• Financial Advantages: Competitive salaries. Retirement savings plans, including 401(k) plans with employer contributions. Employee stock purchase plans.


• Travel Advantages: Flight benefits for employees and their qualified relatives. Discounts on airline tickets and other travel-related services.


• Paid Time Off: Paid vacation and holidays. Sick leave and personal downtime.


• Training and Development: Outstanding opportunities for professional development and career advancement. Training programs and resources to enhance your skills.


• Work-Life Balance: Flexible work schedules and arrangements. Parental leave and other family-friendly policies.


• Employee Discounts: Discounts on various products and services, including airline services.


• Recognition and Rewards: Employee recognition programs. Performance-based bonuses and incentives.


• Health and Safety: Occupational health and safety programs. Access to onsite fitness facilities or wellness programs.


• Education Assistance: Tuition reimbursement or assistance for employees pursuing additional education.


• Community Involvement: Opportunities for community involvement and volunteer programs.


• Employee Assistance Programs: Support programs to help employees with personal and professional challenges.

Career Growth Opportunities

At arenaflex, your career trajectory is limited only by your ambition. We invest heavily in our employees' growth through continuous learning opportunities, mentorship programs, and clear advancement pathways. You'll have access to cutting-edge projects that challenge you to expand your skills and knowledge while working alongside some of the brightest minds in the industry.

Our commitment to professional development means you'll never stop learning. Whether you're looking to deepen your expertise in cybersecurity architecture, expand into leadership roles, or explore specialized areas like cloud security or threat intelligence, arenaflex provides the resources and opportunities to help you achieve your career goals.

Work Environment

You'll be joining a team that thrives on innovation and collaboration. Our work environment is dynamic, fast-paced, and centered on excellence. We believe in fostering a culture where ideas are welcomed, creativity is celebrated, and teamwork is paramount. You'll work alongside talented professionals who are passionate about what they do and committed to making a difference.

At arenaflex, we embrace flexible working arrangements that allow you to do your best work while maintaining a healthy work-life balance. We understand that great ideas can come from anywhere, and we ensure that every voice is heard and valued.

Apply Today

If you're ready to take the next step in your career and make an impact at one of the world's leading organizations, we encourage you to apply. Must be legally authorized to work in the US for any employer without sponsorship. Successful completion of the interview process is expected to meet employment eligibility requirements. Strong, reliable attendance is an essential function of this position.

Don't miss this opportunity to join a team that's shaping the future of the aviation industry while protecting critical digital infrastructure. We look forward to receiving your application and potentially welcoming you to the arenaflex family!