Tory Burch Director of Cybersecurity Architecture and Engineering

About Tory Burch

Founded in New York in 2004, Tory Burch is an American luxury lifestyle brand distinguished by its expressive use of color, signature prints and modern interpretation of classic style. Its collections span ready-to-wear, handbags, footwear and accessories, reaching an international clientele through a global retail and digital presence. As an employer, the company offers opportunities across design, merchandising, retail, technology and corporate functions, combining creative ambition with commercial expertise. Employees contribute to a founder-led business whose identity connects personal style with purpose. Women’s empowerment remains central to this identity, notably through the Tory Burch Foundation’s support for women entrepreneurs.

Role & Responsibilities

• Lead the Cybersecurity Architecture & Engineering function, providing direction, coaching, prioritization, performance support, and professional development for the Cybersecurity Architect and Cybersecurity Engineer.
• Own the end-to-end Cybersecurity Architecture & Engineering service portfolio, including its scope, intake, engagement model, standards, deliverables, roadmaps, metrics, and continuous improvement.
• Define and maintain enterprise security architecture principles, standards, reference architectures, reusable patterns, engineering requirements, and security guardrails.
• Partner with Infrastructure, Digital, Data, Enterprise Architecture, and Application teams to integrate security into planning, architecture, design, development, deployment, migration, change, and operations.
• Design and establish security architecture and engineering processes where existing processes do not adequately support secure technology delivery.
• Establish security participation in architecture review boards and technology governance forums; develop practical intake, triage, review, escalation, exception, and approval processes that engage security early and provide timely guidance.
• Ensure security architecture reviews and design decisions occur early enough to influence solution direction, reduce rework, improve supportability, and avoid unnecessary delivery delays.
• Lead security architecture reviews covering cloud initiatives, infrastructure changes, identity services, endpoint platforms, digital capabilities, applications, integrations, APIs, data flows, collaboration services, and emerging technologies.
• Guide secure end-to-end solution design for distributed systems and business processes connected through integrations, APIs, event flows, orchestration, and automated workflows.
• Ensure end-to-end designs address identity, authentication, authorization, device trust, secrets, encryption, network controls, data protection, logging, monitoring, resilience, third-party dependencies, user experience, and secure failure behavior.
• Define security architecture and engineering requirements for networks, secure connectivity, segmentation, remote access, cloud networking, platform services, and hybrid technology environments.
• Provide architecture and engineering leadership across the Microsoft ecosystem, including Microsoft Entra, Microsoft Intune, Microsoft 365, Azure, and related identity, endpoint, collaboration, and security capabilities.
• Guide modern identity and access design, including adaptive and risk-based access, device trust, authentication strength, passwordless authentication, passkeys, privileged access, application access, and identity lifecycle integration.
• Establish reusable security patterns and guardrails for managed devices, conditional access, authentication, administrative access, application access, secure collaboration, and platform configuration.
• Ensure identity, endpoint, and collaboration controls are risk-based and forward-looking, minimizing unnecessary user friction while maintaining appropriate protection, governance, visibility, and resilience.
• Lead security architecture and engineering for platform modernization and technology transitions, addressing integrations, dependencies, user impact, operational readiness, control design, and support requirements end to end.
• Evaluate new and evolving platform capabilities and determine how to adopt, configure, integrate, and govern them to improve security outcomes, operational efficiency, and user experience.
• Establish and mature application security capabilities, including secure software development lifecycle practices, threat modeling, application architecture reviews, secure coding requirements, and engineering standards.
• Implement and govern DevSecOps practices, including static application security testing, dynamic application security testing, software composition analysis, secrets scanning, container security, API security, and Infrastructure-as-Code security controls.
• Embed code scanning and automated security validation in CI/CD pipelines, with actionable remediation workflows and effectiveness measures.
• Define cloud security requirements and reusable patterns for Microsoft Azure and Google Cloud Platform services, identities, networks, workloads, data services, APIs, logging, monitoring, and platform configurations.
• Drive remediation of architectural and engineering risks with technology owners and business stakeholders.
• Develop architecture and engineering roadmaps aligned with cybersecurity strategy, enterprise technology direction, platform modernization, and business objectives.
• Establish metrics, KPIs, and maturity measures for early security engagement, review efficiency, adoption of secure patterns, control coverage, user impact, and measurable risk reduction.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related discipline, or equivalent practical experience.
• At least 10 years of progressive cybersecurity experience, including significant security architecture, engineering, and technical leadership responsibilities.
• Experience managing technical security professionals and leading complex cross-functional initiatives.
• Demonstrated ownership of a broad security architecture and engineering service portfolio spanning infrastructure, network, identity, endpoint, cloud, application, data protection, and enterprise technology domains.
• Strong architecture and engineering experience in cloud environments, including Microsoft Azure and Google Cloud Platform.
• Experience defining cloud security architectures, guardrails, reusable patterns, and controls across identities, networks, workloads, platforms, applications, APIs, logging, monitoring, and data services.
• Advanced architecture and engineering experience across the Microsoft ecosystem, including Microsoft Entra, Microsoft Intune, Microsoft 365, Azure, and related identity, endpoint, device management, collaboration, and security capabilities.
• Demonstrated experience designing identity-first security architectures using adaptive and risk-based access controls, managed-device signals, modern authentication, authentication-strength requirements, passwordless authentication, passkeys, privileged access controls, and application access policies.
• Strong knowledge of modern identity architecture, including authentication, authorization, federation, application integration, identity lifecycle management, device trust, privileged access, and phishing-resistant authentication.
• Experience developing secure and usable access patterns that balance risk, business requirements, operational supportability, and user experience.
• Experience designing security architecture for enterprise endpoints, collaboration platforms, network services, cloud services, SaaS applications, and hybrid technology environments.
• Ability to lead architecture and engineering for major platform modernization efforts involving identity, device management, connectivity, cloud, collaboration, or enterprise infrastructure capabilities.
• Demonstrated ability to assess native platform security capabilities and determine when to use built-in controls, integrate complementary technologies, or establish additional compensating controls.
• Demonstrated experience designing end-to-end technology and security processes connecting distributed systems and business processes through integrations, APIs, automation, orchestration, and workflows.
• Ability to evaluate end-to-end solution designs, identify security and operational dependencies, and translate risk into practical architecture and engineering requirements.
• Demonstrated experience integrating security into architecture review boards, enterprise architecture governance, change processes, and technology delivery lifecycles.
• Experience designing low-friction security intake and review processes that engage teams early, provide timely decisions, and maintain appropriate governance and traceability.
• Strong understanding of network security, secure connectivity, segmentation, identity, infrastructure, endpoint security, application security, data protection, API security, cloud security, and enterprise architecture.
• Hands-on experience implementing application security, DevSecOps, and secure software development lifecycle practices.
• Experience integrating security controls, code scanning, and automated validation into CI/CD pipelines and software delivery workflows.
• Ability to communicate effectively with executives, engineers, architects, developers, product leaders, infrastructure teams, and business stakeholders.
• Preferred certifications include CISSP, CCSP, TOGAF, SABSA, CSSLP, CISM, Microsoft security or architecture credentials, Google Cloud security or architecture credentials, or equivalent.

Skills

Experience

At least 10 years of progressive cybersecurity experience, including significant security architecture, engineering, and technical leadership responsibilities.

Education

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related discipline, or equivalent practical experience.

Compensation

The base compensation for this position ranges from USD 200,000 to USD 250,000 per annum.

Benefits

Generous benefits supporting health, financial security, and wellness; employee discount; access to exclusive sample sales; free on-demand executive coaching; paid volunteer days; and opportunities to contribute through the Tory Burch Foundation.

Culture

Tory Burch’s workplace culture reflects the brand’s entrepreneurial spirit and optimistic outlook, bringing together creative expression, commercial ambition and a collaborative approach to building a global fashion business. Its commitment to women’s empowerment gives the company a distinctive sense of purpose, connecting its identity as an employer with its broader mission to support women’s ambitions.

About Cerulean

Cerulean is the definitive career portal for the global luxury industry. We match exceptional professionals with exclusive opportunities at the world's most prestigious brands. From haute couture and fine watchmaking to prestige beauty, hospitality, and boutique retail, Cerulean centralises luxury employment to help you find the career for which you were destined.