Security Architect

As the Cybersecurity Architect at Old Dominion Freight Line, you will play a critical role in designing, implementing, and maintaining a comprehensive cybersecurity architecture to safeguard the integrity, confidentiality, and availability of the organization’s information systems and data. You will lead the development of cybersecurity strategies, provide expert guidance on technical security solutions, and ensure the effective implementation of security controls to mitigate risks across the enterprise. This position requires a high level of technical expertise, strategic thinking, and the ability to collaborate across teams to support business continuity and protect the organization from cyber threats. Primary Responsibilities Lead the development and implementation of a comprehensive cybersecurity architecture strategy aligned with Old Dominion's business objectives and security goals.Design secure IT environments and systems, including network security, cloud architecture, endpoint security, identity and access management, and data protection, while ensuring compliance with regulatory requirements and industry best practices (NIST, ISO 27001, SOC 2, etc.).Architect and implement security controls for on-premises and cloud-based infrastructure, focusing on scalability, resilience, and defense-in-depth principles.Conduct thorough risk assessments of current and emerging technologies, systems, and software applications to ensure they meet security standards and policies.Develop, implement, and maintain a cybersecurity governance framework, including policies, procedures, and standards to guide security practices across the organization.Collaborate with senior leadership to define the organization’s cybersecurity strategy, risk appetite, and incident response framework.Oversee the integration of security tools and platforms (SIEM, IDS/IPS, vulnerability management, etc.) into the enterprise’s existing IT architecture.Ensure compliance with relevant security frameworks, including NIST Cybersecurity Framework, CCPA, PCI-DSS, HIPAA, and others applicable to logistics and transportation industries.Monitor and assess emerging cybersecurity threats, vulnerabilities, and attack vectors, recommending proactive measures to mitigate risk to business-critical systems.Lead vulnerability assessments and penetration testing efforts, working closely with internal teams and third-party security consultants to identify weaknesses and implement corrective actions.Establish a robust vulnerability management process, ensuring timely remediation of critical security issues.Develop and maintain incident response plans and processes to ensure quick identification, containment, and resolution of cybersecurity incidents, with a focus on minimizing business disruption.Lead incident response efforts, providing expert guidance on detection, analysis, forensics, and post-mortem evaluations.Work closely with legal, compliance, and communication teams to ensure incidents are managed effectively, with proper escalation, documentation, and reporting procedures in place.Collaborate with IT infrastructure, network, and development teams to design secure solutions that align with business requirements and security best practices.Provide cybersecurity leadership and training to staff across departments, increasing awareness of cyber risks and promoting security best practices.Serve as a technical leader and mentor for cybersecurity engineers and analysts, fostering a collaborative environment focused on continuous improvement.Lead the assessment and management of third-party risks, ensuring that external vendors and partners adhere to Old Dominion's cybersecurity requirements.Conduct due diligence for third-party software and services, identifying and mitigating potential security risks associated with outsourcing and vendor relationships. Job Qualifications Education: Bachelor’s Degree in Cybersecurity, Information Technology, Computer Science, or a related field. Master’s degree preferred.Experience: Minimum of 10+ years of experience in cybersecurity, with at least 5 years in a leadership role or as a cybersecurity architect.Extensive experience in security architecture design, particularly in enterprise environments, covering network, cloud, data, and endpoint security.Deep understanding of cybersecurity frameworks (e.g., NIST CSF, ISO 27001, CIS) and experience applying them within a large, complex organization.Strong knowledge of security technologies such as firewalls, intrusion detection/prevention systems (IDS/IPS), VPNs, SIEM, DLP, endpoint protection, and encryption solutions.Proficiency in cloud security (AWS, Azure, Google Cloud), including secure cloud architecture, identity and access management, and cloud-native security services.Experience in vulnerability management tools (e.g., Rapid7, Qualys, Nessus), penetration testing methodologies, and risk management platforms.Familiarity with regulatory compliance requirements, such as CCPA, HIPAA, PCI-DSS, and others relevant to transportation/logistics.Advanced knowledge of threat intelligence and incident response frameworks, including hands-on experience in threat hunting and managing real-time security incidents.Strong understanding of the SDLC and secure development practices, with experience in DevSecOps integration.Preferred Experience:Professional certifications, such as CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), CISA (Certified Information Systems Auditor), or AWS Certified Security – Specialty.Experience with automation and orchestration tools in a security context (e.g., SOAR, Ansible, Terraform).Advanced knowledge of networking protocols and technologies (e.g., TCP/IP, VPNs, DNS, HTTP/HTTPS).Experience with the logistics and transportation industry and understanding the specific security challenges and regulatory requirements in this sector. Compensation Range: The referenced salary range is based on the Company's good faith belief at the time of posting. Actual compensation may vary based on factors such as geographic location, work experience, market conditions, education/training, skill level, and state/local wage requirements. ($143,250-$179,041) Working Days: Shift and hours to be determined. Working Shift: Shift and hours to be determined. Work days/shifts may change based on scheduling and business needs and are provided as guidelines at the time of posting. Application Window: Ongoing Candidates are encouraged to apply as soon as possible. Old Dominion plans to screen candidates, conduct interviews, and proceed with hiring candidates to meet its business needs, which may result in filling the role before the current anticipated application window closes. Join the OD Family Today! As a Full Time member of our Family, you and your family are eligible to receive: Great Health Benefits including a Zero premium medical plan for employee only coverage Vision & Dental Short Term & Long Term Disability Flex Spending Accounts 401k Retirement plan with company match and additional company annual discretionary match opportunity Life Insurance Wellness Program 12 Days Paid Time Off 9 Paid Holidays including a birthday holiday Tuition Reimbursement for Drivers and Technicians Training and growth opportunities to build a career We prioritize our OD family of employees Ability to advance through our promote from within philosophy National Career Opportunities Available at our 260+ service centers