Director of Information Security – Architecture & Engineering

Regal is a leading cinema brand focused on protecting the technology that brings movies to life. As the Director of Information Security – Architecture & Engineering, you will lead the development of enterprise security architecture and engineering capabilities, ensuring that all systems and networks are secure and compliant.

Responsibilities:

• Set the enterprise-wide security architecture strategy that keeps Regal’s global operations safe from opening credits to end credits
• Partner with our CISO and executive teams to evolve the cybersecurity roadmap — balancing bold innovation with airtight protection
• Establish the security standards, patterns, and blueprints that guide teams across multiple business units and regions
• Lead and mentor a team of world-class security architects and engineers
• Architect secure solutions across cloud, on-prem, and cinema technology environments — from POS to mobile apps to loyalty systems
• Embed security-by-design into every technology initiative, ensuring new systems roll out like polished premieres
• Oversee secure vendor integrations, payment systems, and global platform partnerships
• Drive DevSecOps adoption across engineering teams
• Direct the engineering of Regal’s critical security stack: SIEM, EDR/XDR, IAM, firewalls, vulnerability tools, encryption, and more
• Implement automation and orchestration across monitoring and response workflows — reducing time-to-detect and time-to-respond
• Ensure secure patching, configurations, and cloud posture management
• Provide expert architectural guidance during major incidents
• Ensure alignment with PCI-DSS, ISO 27001, NIST CSF, and Cineworld governance standards
• Lead threat modeling, risk assessments, and continuous improvement programs
• Build dashboards and metrics to spotlight security maturity and resilience
• Partner with Cinema Operations, Guest Experience, Data Analytics, and Corporate IT — ensuring security is part of the storyline early and often
• Communicate complex issues clearly to technical and non-technical audiences
• Build strong vendor relationships that uphold Regal’s cybersecurity expectations

Requirements:

• 10+ years of information security architecture or engineering experience; 5+ years leading teams
• Proven success securing enterprise and cloud environments at scale
• Expertise with AWS/Azure security, zero-trust, microservices, DevSecOps, and secure design
• Familiarity with tools like CrowdStrike, Splunk, Palo Alto, Okta, Qualys
• Strong communication, leadership, and storytelling skills
• CISSP, CISM, SABSA, or cloud security certifications
• Experience in entertainment, retail, hospitality, or other consumer-centric industries