Information Security Advisor Senior

Elevance Health•Indianapolis, IN

3d•Hybrid

About The Position

The Information Security Advisor Senior is responsible for the selection and delivery of strategic network security, access control and secure transaction/messaging solutions. Develops, recommends, and implements enterprise information security policies, technical standards, guidelines, procedures, and other elements of an infrastructure necessary to support information security in compliance with established company policies, regulatory requirements, and generally accepted information security controls. How you will make an impact: Leads system and network architecture support for information and network security technologies. Leads development and execution of risk assessment methodologies to fit business, regulatory, and technical environment considerations; leads the development of requirements, system architecture, and software design of security products and services; leads the development of strategies for discovery, evaluation and response to new networking attacks; develops security incident response plans and strategies. Provides trouble resolution and serves as point of technical escalation on complex problems. Creates presentations and seeks IT management approval and acceptance of significant replacements or reconfigurations of major security systems serving the Enterprise. Sets vendor strategy and direction. May be assigned to project teams for technical consultation to business partners and developers. Designs & engineers comprehensive access management and network security technical solutions based on business requirements and defined technology standards; works with architecture to update technology direction & strategy. Develops reports supporting strategy and direction for management. Developing and maintaining data science models, detection analytics, and behavioral algorithms for cybersecurity use cases. Performing proactive threat hunting activities using large-scale enterprise telemetry, logs, and security datasets. Designing and implementing statistical, machine learning, and predictive models to identify suspicious or malicious activity. Developing strategies for discovery, evaluation, and response to emerging cyber threats, insider risks, and fraud patterns. Capable of serving as technical merger & acquisition lead. Acts as a subject matter expert among peers, with manager and senior management. Must be capable of providing top-tier support for 5 or more of the information security technology common body of knowledge skill sets: 1) Access Control, 2) Application Security, 3) Business Continuity and Disaster Recovery Planning, 4) Cryptography, 5) Information Security and Risk Management 6) Legal, Regulations, 7) Compliance and Investigations, 8) Operations Security, 9) Physical (Environmental) Security, 10) Security Architecture and Design, 11) Telecommunications and Network Security.

Requirements

BS/BA in information Technology or related field of study
A minimum of 8 years experience in systems administration and security aspects of information systems, access management and network security technologies, network communications, computer networking, telecommunications, systems development and management, hardware, software, data, and people
Experience with multiple technical and business disciplines required.
Requires broad-based experience to plan and design highly complex systems
Any combination of education and experience, which would provide an equivalent background.

Nice To Haves

Security Certifications: CISSP and other advanced technical security certifications (e.g. Information Systems Security Architecture Professional, Information Security Engineering Professional, Certification and Accreditation Professional, or equivalent certifications) strongly preferred.
Machine learning and statistical modeling techniques preferred.
Threat hunting and cybersecurity analytics experience preferred.
SIEM, EDR, UEBA, and fraud analytics platforms experience preferred.
Scripting and programming languages such as Python, SQL, R, or similar technologies preferred.
Data visualization and dashboard development experience preferred.
Big data technologies, automation, and cloud-based analytics platforms experience preferred.
Anomaly detection, user/entity behavior analytics (UEBA), and predictive analytics experience preferred.
CI/CD pipelines and automation for analytics and detection deployment experience preferred.

Responsibilities

Leads system and network architecture support for information and network security technologies.
Leads development and execution of risk assessment methodologies to fit business, regulatory, and technical environment considerations.
Leads the development of requirements, system architecture, and software design of security products and services.
Leads the development of strategies for discovery, evaluation and response to new networking attacks.
Develops security incident response plans and strategies.
Provides trouble resolution and serves as point of technical escalation on complex problems.
Creates presentations and seeks IT management approval and acceptance of significant replacements or reconfigurations of major security systems serving the Enterprise.
Sets vendor strategy and direction.
May be assigned to project teams for technical consultation to business partners and developers.
Designs & engineers comprehensive access management and network security technical solutions based on business requirements and defined technology standards.
Works with architecture to update technology direction & strategy.
Develops reports supporting strategy and direction for management.
Developing and maintaining data science models, detection analytics, and behavioral algorithms for cybersecurity use cases.
Performing proactive threat hunting activities using large-scale enterprise telemetry, logs, and security datasets.
Designing and implementing statistical, machine learning, and predictive models to identify suspicious or malicious activity.
Developing strategies for discovery, evaluation, and response to emerging cyber threats, insider risks, and fraud patterns.
Capable of serving as technical merger & acquisition lead.
Acts as a subject matter expert among peers, with manager and senior management.
Must be capable of providing top-tier support for 5 or more of the information security technology common body of knowledge skill sets: 1) Access Control, 2) Application Security, 3) Business Continuity and Disaster Recovery Planning, 4) Cryptography, 5) Information Security and Risk Management 6) Legal, Regulations, 7) Compliance and Investigations, 8) Operations Security, 9) Physical (Environmental) Security, 10) Security Architecture and Design, 11) Telecommunications and Network Security.