Info Security Advisor (US)

Elevance Health•Ashburn, VA

5d•$112,160 - $193,476•Hybrid

About The Position

The Info Security Advisor maintains enterprise information security policies, technical standards, guidelines, procedures, and other infrastructure elements required to support information security in compliance with company policies, regulatory requirements, and generally accepted information security controls. The role delivers strategic network security, access control, and secure transaction and messaging solutions, ensuring technology-based security solutions are properly conceived, designed, and implemented in accordance with enterprise standards. The position provides engineering design, troubleshooting, technical escalation, and architecture support for information and network security technologies. It leads or plans implementations, develops testing plans, investigates and reports data security incidents, maintains incident response plans, and supports risk assessments and security procedure implementation. The advisor also represents upgrades and system replacements in change control, oversees vendor services and may help establish vendor strategy, develops support procedures and performance metrics, leads incident recovery and root-cause analysis, and may coordinate other analysts during recovery efforts. The role requires top-tier support capability across at least four information security technology knowledge areas. This is a hybrid role based in Ashburn, Virginia, requiring in-office work one to two days per week. Candidates must live within a reasonable commuting distance of an office unless an accommodation is granted as required by law. The position is not eligible for current or future visa sponsorship. It is classified as non-management exempt and first shift. The anticipated posting end date is November 10, 2026.

Requirements

Bachelor of Science or Bachelor of Arts degree in Information Technology or a related field, and at least five years of relevant experience; alternatively, an equivalent combination of education and experience.
Relevant experience may include systems support, system administration, system engineering, system security, access management, network security, network communications, computer networking, telecommunications, systems development and management, hardware, software, or data.
Experience planning and designing highly complex systems.
Capability to provide top-tier support in at least four of these areas: Access Control; Application Security; Business Continuity and Disaster Recovery Planning; Cryptography; Information Security and Risk Management; Legal/Regulations, Compliance and Investigations; Operations Security; Physical (Environmental) Security; Security Architecture and Design; Telecommunications and Network Security.

Nice To Haves

Experience with multiple technical and business disciplines.
CISSP or other technical security certifications, such as Systems Security Certified Practitioner or Certification and Accreditation Professional.
Experience with system access certifications, privileged access controls, and audit support.
Experience with pre-sales RFPs and bids, and knowledge of NIST 800-53, ISO 27001, or HITRUST.
Proficiency with SailPoint, ServiceNow, SAST/DAST tools, cloud security tools, and other relevant security tools.
Strong communication and collaboration skills, with the ability to engage effectively with technical and non-technical teams.
Detail-oriented, with strong problem-solving abilities and the ability to manage complex priorities and drive results in a dynamic environment.

Responsibilities

Provide first-level engineering design functions and resolve technical issues.
Provide troubleshooting and serve as the technical escalation point for complex problems.
Lead or plan implementations of access management and network security technologies.
Develop testing plans to ensure implementation quality.
Lead investigation and reporting of data security events and incidents.
Provide system and network architecture support for information and network security technologies.
Provide technical support to business and technology associates for risk assessments and implementation of appropriate security procedures, standards, and technologies.
Maintain security incident response plans.
Represent major upgrades and business system replacements in change control.
Oversee the enterprise mix of vendor services and recommend changes and strategy updates.
May act as a key contact for setting vendor strategy.
Design and engineer repeatable technical solutions based on business requirements and defined technology standards.
Develop support procedures and performance metric reports.
Lead level 1 and level 2 incident recoveries and may organize other analysts' efforts during recovery.
Lead root-cause analysis efforts.
Provide top-tier support for four or more information security technology knowledge areas.