Job Description:
Role Summary/Purpose:
The VP, Information Security Architecture will lead the design, development, and execution of the enterprise-wide security architecture strategy, ensuring alignment with business objectives, regulatory requirements, and evolving threat landscapes. This role requires a visionary and pragmatic leader with extensive experience in financial services or similarly regulated industries, combining strategic vision and hands-on expertise to advance security frameworks focused on Cloud Security, Threat Modeling, Identity and Access Management (IAM) architecture, and Security Technologies. The role will influence technology decisions, drive secure innovation, and oversee the evaluation, selection, and integration of cutting-edge security technologies to protect critical financial assets and strengthen the organization’s security programs. Exceptional communication skills are essential to effectively engage stakeholders at all levels and foster a security-first culture throughout the organization.
Our Way of Working
We’re proud to offer you choice and flexibility. At Synchrony, our way of working allows you to have the option to work from home, near one of our Hubs or come into one of our offices. Occasionally you may be required to commute to our nearest office for in person engagement activities such as business or team meetings, training and culture events.
Essential Responsibilities:
Strategic Leadership
Develop, communicate, and execute a comprehensive, enterprise-wide information security architecture strategy that aligns with the organization’s business objectives, risk appetite, and regulatory requirements within the financial services sector.
Partner closely with senior leadership across IT, Risk Management, Compliance, and Business Units to embed security architecture principles into technology roadmaps, digital transformation efforts, and key enterprise initiatives.
Drive a security-first approach that anticipates emerging threats, trends, and innovations to ensure resilient and forward-looking security architecture.
Security Architecture & Design
Lead the design, development, and deployment of integrated security solutions across networks, applications, cloud platforms, data repositories, identity and access management (IAM), and endpoints within a complex, heavily regulated financial ecosystem.
Define, implement, and enforce security architecture standards, policies, and frameworks based on industry best practices (e.g., NIST CSF, CRI, CIS Controls) to ensure consistency, compliance, and operational effectiveness.
Conduct advanced threat modeling and risk assessments to proactively identify vulnerabilities and guide architectural decisions that mitigate risks to critical financial assets and data.
Develop and implement specialized security architecture frameworks focused on emerging technologies, including Artificial Intelligence (AI), to ensure AI systems and models are designed, deployed, and maintained with strong security controls and risk mitigation.
Collaborate with innovation AI, and machine learning teams to embed secure design principles around AI model integrity, data privacy, access controls, and adversarial threat protection.
Risk Management & Threat Intelligence
Identify architectural risks and gaps related to evolving cyber threats, emerging technologies, and regulatory changes, developing comprehensive mitigation strategies to safeguard sensitive information and critical infrastructure.
Collaborate with threat intelligence teams and security operations to continuously monitor the threat landscape, adapting security architecture to address new vulnerabilities and compliance challenges in a timely manner.
Security Technology & Innovation
Lead the evaluation, selection, integration, and lifecycle management of advanced security technologies that strengthen the organization’s defense capabilities and support evolving business needs.
Drive innovation by researching and piloting emerging security technologies and methodologies—such as zero trust, AI-driven threat detection, and automated response—to elevate the overall security posture.
Collaborate with IT and business units to ensure new technology implementations are designed and deployed with embedded security controls and architectural integrity.
Team Leadership & Development
Build, mentor, and inspire a high-performing team of security architects and engineers, fostering professional growth, technical excellence, and a culture of innovation and continuous improvement.
Promote cross-functional collaboration between security, IT, and business stakeholders to drive cohesive security initiatives and enhance organizational security maturity.
Stakeholder Engagement & Advisory
Serve as a trusted advisor to executive leadership and key stakeholders by providing clear, business-focused insights and strategic recommendations concerning security architecture, technology trends, risk posture, and compliance.
Manage relationships with external partners, vendors, and regulatory bodies to ensure alignment with industry advancements and compliance requirements, driving continuous enhancement of the organization’s security posture.
Compliance, Governance & Audit Support
Ensure that all security architecture components and initiatives comply with relevant regulations and industry standards applicable to financial services, including FFIEC, SOX, GDPR, PCI-DSS, and CRI.
Lead efforts to support internal and external audits, addressing findings through architectural improvements, policy updates, and technology enhancements, thereby maintaining a robust compliance and governance framework.
Qualifications/Requirements:
Bachelor’s or Master’s degree in Computer Science, Information Technology, Cybersecurity, or related field. In lieu of a degree, 15+ years of related experience. Advanced degrees and certifications preferred.
10+ years of progressive experience in information security, with at least 5 years in a leadership role focusing on security architecture in financial services or highly regulated industries.
Deep expertise in designing and implementing enterprise security solutions, including cloud security (AWS, Azure, GCP), identity and access management (IAM), zero trust, network security, encryption, and data protection.
Demonstrated experience in security technology evaluation, selection, integration, and driving innovation through emerging cybersecurity technologies such as AI-driven threat detection, automation, and advanced analytics.
In-depth knowledge of financial services regulations (e.g., FFIEC, SOX, GDPR, PCI-DSS) and compliance frameworks, with the ability to architect security solutions that ensure regulatory adherence and audit preparedness.
Proven ability to develop security architecture frameworks and influence enterprise IT strategy.
Strong experience in threat modeling, risk assessment, and translating complex threat intelligence into actionable architectural improvements.
Proven ability to develop and enforce security architecture standards, policies, and frameworks aligned with industry best practices such as NIST CSF, CRI, and CIS Controls.
Demonstrated leadership skills in building, mentoring, and managing high-performing security architecture teams, fostering a culture of collaboration, innovation, and continuous learning.
Exceptional communication and interpersonal skills, able to influence and articulate complex security concepts clearly to executive leadership, technical teams, and business stakeholders alike.
Relevant professional certifications such as CISSP, CISM, CISA, SABSA, TOGAF, CCSK, or equivalent credentials are highly desirable.
Grade/Level: 14
The salary range for this position is 170,000.00 - 290,000.00 USD Annual and is eligible for an annual bonus based on individual and company performance.
Actual compensation offered within the posted salary range will be based upon work experience, skill level or knowledge.
Salaries are adjusted according to market in CA, NY Metro and Seattle.
Eligibility Requirements:
You must be 18 years or older
You must have a high school diploma or equivalent
You must be willing to take a drug test, submit to a background investigation and submit fingerprints as part of the onboarding process
You must be able to satisfy the requirements of Section 19 of the Federal Deposit Insurance Act.
New hires (Level 4-7) must have 9 months of continuous service with the company before they are eligible to post on other roles. Once this new hire time in position requirement is met, the associate will have a minimum 6 months’ time in position before they can post for future non-exempt roles. Employees, level 8 or greater, must have at least 18 months’ time in position before they can post. All internal employees must consistently meet performance expectations and have approval from your manager to post (or the approval of your manager and HR if you don’t meet the time in position or performance expectations).
Legal authorization to work in the U.S. is required. We will not sponsor individuals for employment visas, now or in the future, for this job opening. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.
Our Commitment:
When you join us, you’ll be part of an inclusive culture where your individual skills, experience, and voice are not only heard – but valued. Together, we’re building a future where we can all belong, connect, and turn ideals into action. More than 50% of our workforce is engaged in our Employee Resource Groups (ERGs), where community and passion intersect to offer a safe space to learn and grow.
This starts when you choose to apply for a role at Synchrony. We ensure all qualified applicants will receive consideration for employment without regard to age, race, color, religion, gender, sexual orientation, gender identity, national origin, disability, or veteran status. We’re proud to have an award-winning culture for all.
Reasonable Accommodation Notice:
Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please tell us if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.
If you need special accommodations, please call our Career Support Line so that we can discuss your specific situation. We can be reached at 1-866-301-5627. Representatives are available from 8am – 5pm Monday to Friday, Central Standard Time
Job Family Group:
Information Technology
