Lead IT Security Architect

This is a fully remote position, open to applicants in Florida, +9 more states.

📋 Description

• Improve and sustain access governance segregation of duties (SoD) processes.

• Collaborate with business units, Audit, and application teams to design and uphold segregation of duties access controls.

• Establish security architecture standards for the integration of new technology.

• Identify, assess, and provide design specifications for security risks tied to IT and enterprise projects.

• Work alongside business representatives and IT leaders to outline information security strategy and direction.

• Create formal management reporting dashboards and metrics for senior management.

• Oversee security product and service cost drivers as well as industry and business trends.

• Pinpoint areas that necessitate modifications to existing security policies and procedures or the formulation of new ones.

• Offer information security subject matter expertise to technology teams and projects.

• Assess and recommend security software and hardware, integrating them into the current architecture.

• Conduct third-party security risk evaluations, particularly for cloud service providers.

• Manage third-party inquiries regarding CNO’s information security program and policies.

• Ensure the appropriate technologies are utilized to fulfill SOX, PCI, and HIPAA/HITECH compliance requirements.

⛳️ Requirements

• Bachelor's degree in a pertinent field, or equivalent experience in lieu of a degree.

• Over 10 years of progressive IT experience.

• A minimum of 3 years in a security architect role or a similar position.

• Capability to effectively engage with IT and business stakeholders, translating technical concepts for non-technical audiences.

• Proven understanding of AI and machine learning technologies, including related cybersecurity risks and governance/regulatory considerations.

• CISSP certification or other relevant security certifications is preferred.

• Comprehensive knowledge of information security practices related to PCI, SOX, HIPAA/HITECH, and OWASP application security.

• Strong understanding of information security standards and frameworks, including NIST and ISO27001.

• Experience in implementing security at the application, network, and operating system levels.

• All work must be conducted within the United States.

🏝️ Benefits

• Medical, Dental, and Vision insurance.

• Performance-based bonus or sales incentive.

• 401(k) retirement plan with company match.

• Short-term & long-term disability insurance.

• Paid time off and 10 corporate holidays.

• Paid parental leave.

• Company-paid life insurance.

• Mental & Financial Well-Being resources.

• Flexible work environment.

• Occasional travel to corporate offices may be required.