Scope of Responsibility:

end‑to‑end for enterprise security architecture outcomes, cross‑domain security design, architectural decision‑making, and control placement. Governs architecture but does not operate security tools.

Primary Responsibilities

• Define and maintain enterprise security architecture vision, principles, and target state

• Develop and govern security reference architectures and reusable design patterns

• Act as final design authority for high‑risk systems and major transformations

• Resolve cross‑domain control ownership and boundary conflicts

• Own architectural risk decisions and compensating control strategies

• Ensure consistency of identity, trust models, telemetry, and control integration

• Serve as primary interface to Enterprise Architecture, CIO, CISO, and governance bodies