Principal IT Security Architect

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop intricate security architectures required for the integration of new entities following mergers or acquisitions.

• Guide technology teams in navigating security architecture decision-making processes.

• Convey complex technical and security concepts in a clear, business-oriented manner to both technical teams and senior/executive leadership.

• Evaluate regulatory changes and revise security architecture, standards, and policies accordingly.

• Offer guidance and mentorship to cybersecurity leads, senior architects, and engineers.

• Conduct research and monitor secure system standards, industry trends, emerging technologies, threats, tactics, and procedures.

• Create formal management reporting dashboards and metrics for security risk.

• Communicate risk factors and mitigation strategies during incidents or risk treatment initiatives.

• Identify, assess, and document security requirements for IT and enterprise-level projects.

• Revise existing security policies and procedures or establish new ones to accommodate business growth.

• Execute third-party security risk assessments, particularly for cloud service providers.

• Address third-party information inquiries regarding CNO’s information security program and policies.

• Ensure that technologies comply with SOX, PCI, and HIPAA/HITECH regulations.

• Act as a subject matter expert for incident leads during Incident Response activities.

• Lead cross-functional working groups during Incident Response efforts.

• Assist Legal and Internal Audit functions with data gathering and information requests.

• Evaluate, advise, and enhance AI security initiatives utilizing governance frameworks, security posture assessments, adoption-risk analysis, and threat mitigation strategies.

⛳️ Requirements

• Bachelor’s degree in Information Technology or a related field, or equivalent professional experience.

• 12 years of progressive experience in IT.

• Over 5 years of experience as a security architect or in a related position.

• Extensive expertise at the enterprise level in identity and access management, privileged access management, security operations, incident response, vulnerability management, infrastructure and application security, and business/technology resilience.

• Proven experience implementing and ensuring compliance with DoD STIG, Critical Infrastructure Protection, FedRAMP, or other security requirement frameworks or guidelines.

• Capability to apply both business and technical knowledge to security challenges, including incident response.

• Preferred: Master’s degree in Information Technology or a related field.

• Excellent verbal and written communication abilities.

• Preferred: CISSP or other relevant security certifications such as CCSP, CISM, or SSCP.

• Familiarity with operating systems, networking, storage, identity providers, data center infrastructure, cloud service provider architecture, and mainstream platforms including Microsoft, Oracle, and IBM.

• Must perform all duties within the United States.

• No visa sponsorship will be provided.

🏝️ Benefits

• Medical, Dental, and Vision insurance.

• Performance-based bonuses or sales incentives.

• 401(k) retirement plan with company matching contributions.

• Short-term and long-term disability insurance.

• Paid time off along with 10 corporate holidays.

• Paid parental leave.

• Company-sponsored life insurance.

• Resources for Mental and Financial Well-Being.

• Flexible work environment.

• Option for fully remote work from any location within the EST or CST time zones in the U.S.

• Access to work from the corporate offices in Carmel, IN or Chicago, IL as required for associates residing within 60 miles.

• Opportunities to enhance skills through challenging professional experiences.