Cybersecurity Architect

HealthPartners • Bloomington, MN

5d • Hybrid

About The Position

HealthPartners is hiring a Cybersecurity Architect. The Cybersecurity Architect serves as a technical authority responsible for defining and governing enterprise-wide cybersecurity architecture strategy across HealthPartners' integrated healthcare payer and provider organization. This highly visible role drives the long-term cybersecurity vision, ensuring alignment with business, technology, and clinical objectives while establishing the architectural standards and controls necessary to enable secure, scalable digital transformation. As a strategic partner, the Cybersecurity Architect partners with executive stakeholders, technology leaders, and engineering teams to influence cybersecurity investments, guide technology roadmaps, and provide architectural leadership across a complex and highly regulated environment. It leads the development of cybersecurity frameworks, reference architectures, and reusable security patterns that improve delivery efficiency, strengthen risk management practices, and support innovation across the enterprise. This role is critical to advancing HealthPartners' cybersecurity maturity by providing dedicated cybersecurity architecture guidance separate from operational tool ownership and people management responsibilities. Through strategic planning, governance, and secure-by-design principles, the Cybersecurity Architect helps accelerate technology onboarding, improve consistency in cybersecurity implementation, reduce exceptions and rework, strengthen audit and compliance outcomes, and lowers the long-term cost of managing cybersecurity risk. Reporting to the Manager, Cybersecurity Engineering and Architecture, this position joins a collaborative team of six security professionals focused on protecting HealthPartners' systems, data, and digital assets.

Requirements

• Bachelor's degree in Information Security, Cybersecurity, Information Assurance, Computer Science, Computer Engineering, or a related field.
• Ten (10) years of progressive experience in information security, cybersecurity, or a related IT information security discipline.
• Three (3) years of experience with enterprise or cybersecurity architecture accountability, including ownership of architectural standards, roadmaps, and governance.
• Certified Information Systems Security Professional (CISSP) certification
• Knowledge of healthcare payer and provider environments, including applicable regulatory, privacy, and cybersecurity requirements.
• Deep expertise in enterprise architecture and cybersecurity architecture frameworks, methodologies, and best practices.
• Demonstrates ability to communicate complex technical concepts to executive leadership and influence strategic decision-making.

Nice To Haves

• Graduate degree in Information Security, cybersecurity, Information Assurance, Computer Science, Computer Engineering, or a related field.
• Twelve (12) years of progressive experience in information security, cybersecurity, or a related IT security discipline.
• Four (4) years of experience providing enterprise or cybersecurity architecture leadership, including accountability for architecture strategy, governance, and technology standards.
• Knowledge of frameworks such as SABSA, TOGAF, NIST SP800-160, or ISO 27001.
• Previous experience working in the health care industry.

Responsibilities

• Defines and owns the enterprise cybersecurity architecture strategy and target-state vision.
• Establishes architectural principles, standards, procedures and controls across the organization.
• Aligns cybersecurity architecture with enterprise business, clinical, and technology strategies.
• Guides long-term cybersecurity investment and modernization decisions.
• Provides architectural leadership for HIPAA, HITRUST, CMS, PCI DSS, NACHA, and other regulatory frameworks.
• Oversee cybersecurity architecture governance, review boards, and exception processes.
• Partners with risk, compliance, legal, and audit leaders to manage enterprise cybersecurity risk.
• Ensures consistent interpretation and application of cybersecurity controls across domains.
• Leads cybersecurity architecture for complex, enterprise-wide initiatives.
• Resolves design conflicts across applications, cloud, infrastructure, data, and clinical platforms.
• Architects secure integration patterns across legacy and modern ecosystems.
• Serves as final escalation point for cybersecurity architecture decisions.
• Drives adoption of zero trust, cloud-native security, and advanced protection models.
• Defines enterprise patterns for identity-centric security, data-centric protection, and observability.
• Evaluates and guides adoption of new cybersecurity technologies and platforms.
• Ensures scalability and resilience of cybersecurity architectures.
• Acts as a strategic cybersecurity advisor to CTO, CISO, and senior technology leaders.
• Translate complex cybersecurity concepts into business-relevant insights.
• Influences roadmap prioritization and funding through architectural recommendations.
• Represents cybersecurity architecture in enterprise planning and governance forums.
• Mentor senior analysts and engineers, setting expectations for architectural excellence.
• Builds and evolve cybersecurity architecture practices, methods, and documentation.
• Promotes a culture of secure-by-design and shared accountability.
• Drives continuous improvement of cybersecurity architecture maturity.

Benefits

• Additional compensation based on role (e.g., shift differential, bonus, sales incentive, productivity pay, etc.)

What This Job Offers

• Job Type: Full-time
• Career Level: Senior