<div><b>Description</b><br/><br/><strong>Job overview and responsibilities</strong><br/><br/>The Principal Architect - Digital Risk and Resilience is part of a Cybersecurity team that shapes how the enterprise makes risk-informed decisions across technology, operations, and the business. This role drives high-visibility, cross-functional work to integrate Digital Risk Management with partners in Cybersecurity and Digital Risk, Digital Technology, and business owners of risk, helping the enterprise identify, assess, and govern systemic digital risk across critical operational capabilities, with a focus on digital fragility, operational survivability, and safe continuity of operations when digital systems degrade or fail. The Principal Architect will play a central role in defining and maturing the enterprise cyber resiliency program, including dependency mapping across critical capabilities, resilience indicators, systemic exposure assessments, recovery readiness, and executive decision support across United's digital footprint. This role will translate complex digital dependency, concentration, recoverability, and detection risks into decision-grade insight that informs resilience investments, governance priorities, and risk treatment strategies.<br/><br/><ul><li>Lead enterprise-level integration of Digital Risk Management with partners across Cybersecurity and Digital Risk, Digital Technology, and the business to embed risk-based decision making into planning, delivery, governance, and resilience decisions, with explicit focus on systemic digital risk across critical operational capabilities.</li><li>Design, implement, and mature monitoring, visibility, and response-readiness capabilities that move the organization beyond manual, compliance-based approaches toward continuous insight into digital fragility, actionable resilience signals, detection coverage, escalation readiness, and operational exposure across critical services.</li><li>Establish and evolve the enterprise resilience program by defining key resilience indicators, core resiliency capabilities, target outcomes, and implementation roadmaps, while mapping end-to-end digital dependencies for critical operational capabilities, identifying single points of failure, quantifying cross-functional coupling risk, and aligning requirements across Business Continuity, Cybersecurity and Digital Risk, Digital Technology, and business owners of risk.</li><li>Develop practical models, methods, and frameworks for evaluating systemic digital risk in emerging and complex environments, including concentration risk, recoverability complexity, dependency fragility, detection visibility, vendor coupling, and time-to-operational-failure, and translate results into executive-level scorecards and prioritized risk treatment options.</li><li>Improve risk prioritization and decision support at scale by partnering with technical and business stakeholders to assess blast radius, manual fallback capacity, data integrity restoration risk, vendor dependency, and digital safety margin, and operationalize resilience-focused decision support within governance and risk workflows.</li><li>Assess and integrate emerging systemic risk drivers-including AI-enabled threats, identity compromise, cloud control plane disruption, vendor update failure, integration breakdown, and data corruption-into enterprise governance, resilience planning, and risk treatment processes.</li><li>Conduct structured failure simulation and systemic stress testing to assess resilience across critical capabilities, including scenarios involving identity outage, cloud control plane disruption, vendor service failure, integration loss, and data corruption, and use findings to improve recovery sequencing, escalation readiness, and resilience investment priorities.</li></ul><br/><br/><b>Qualifications</b><br/><br/><b><strong>What's needed to succeed (Minimum Qualifications):</strong></b><br/><br/><ul><li>Bachelor's degree in Cybersecurity, Information Technology, Engineering, Risk Management, or a related field</li><li>5+ years of experience in cybersecurity, digital risk, operational resilience, business continuity, technology risk, or related disciplines, including experience working across complex business and technology environments</li><li>Experience applying governance, risk, and compliance concepts and enterprise risk management practices, including cybersecurity, resiliency, and control frameworks in complex business and technology environments</li><li>Knowledge of digital resilience, operational resilience, and business continuity concepts, including the ability to define meaningful indicators, capabilities, and target outcomes, map dependencies across critical operational functions, assess digital fragility, and evaluate recovery realism in support of enterprise resiliency objectives</li><li>Working knowledge of relevant technology domains such as cloud, software development, data platforms, identity, infrastructure, integrations, and security architecture concepts, including how dependencies across these domains affect concentration risk, recoverability, and systemic exposure</li><li>Skill in building practical risk and resiliency models, translating ambiguous or emerging risk issues into actionable frameworks, and using dependency, monitoring, and control insights to improve systemic risk prioritization and executive decision support</li><li>Experience designing or operationalizing monitoring, metrics, or governance mechanisms that move risk programs from periodic assessment toward continuous visibility, resilience signal generation, escalation readiness, and operational exposure management</li><li>Ability to lead change through influence, build awareness and adoption across diverse stakeholder groups, and communicate complex dependency, fragility, and resilience concepts clearly to technical, operational, and executive audiences</li><li>Strong problem solving, critical thinking, interpersonal, collaboration, written, and verbal communication skills, with the ability to work independently, navigate ambiguity, assess systemic exposure, and drive progress in high-visibility environments</li><li>Must be legally authorized to work in the United States for any employer without sponsorship</li><li>Successful completion of interview required to meet job qualification</li><li>Reliable, punctual attendance is an essential function of the position</li></ul><br/><br/><b><strong>What will help you propel from the pack (Preferred Qualifications):</strong></b><br/><br/><ul><li>Master's degree in Cybersecurity, Information Technology, Engineering, Risk Management, or a related field</li><li>Certification such as CISA, CRISC, CISSP, or CISM</li><li>Experience with operational resilience, dependency mapping, enterprise risk governance, or critical service resiliency</li><li>Expert knowledge of governance, risk, and compliance concepts and enterprise risk management practices</li><li>Knowledge of emerging risk drivers, including AI risk management and AI governance practices, and the ability to connect such risks to broader governance, resilience, and enterprise risk structures</li><li>Knowledge of recognized resilience risk management frameworks such as NIST CSF 2.0, NIST operational resilience standards, NIST SP 800-160 Vol. 2, CERT-RMM, or related industry guidance</li></ul><br/><br/>Job Posting Expiration: 8/10/2026</div>
