Information Security Exec Advisor

Elevance Health•Durham, NC

23h•Hybrid

About The Position

The Information Security Executive Advisor leads the strategy, execution, and continuous improvement of enterprise Technology Compliance programs with a focus on regulatory compliance, AI governance, Monitoring and Oversight, Information Security, and risk management. This role requires associates to be in-office 1 - 2 days per week, fostering collaboration and connectivity, while providing flexibility to support productivity and work-life balance. The ideal candidate will reside in North Carolina, within a commuting distance from an office.

Requirements

Requires BS/BA in Information Technology or related field of study and a minimum of 10 years’ experience in systems administration and security aspects of information systems, access management and network security technologies, network communications, computer networking, telecommunications, systems development and management, hardware, software, data, and people; experience with multiple technical and business disciplines required; or any combination of education and experience, which would provide an equivalent background.

Nice To Haves

Expert knowledge and understanding of industry-accepted data processing controls and concepts strongly preferred.
Security Certifications: CISSP preferred and other advanced technical security certifications (e.g. Information Systems Security Architecture Professional, Information Systems Security Engineering Professional, Certification and Accreditation or equivalent certifications), strongly preferred.
Experience with AI governance and risk management preferred.
Strong background in technology governance and control frameworks.
Knowledge of healthcare regulatory requirements and compliance.
Experience in a leadership role strongly preferred.

Responsibilities

Oversees regulatory inquiry and response processes, compliance monitoring activities, control assessments, issue management, and corrective action tracking to ensure timely, accurate, and high-quality regulatory submissions.
Drives the integration of AI governance, digital technologies, and automated monitoring capabilities into technology and operational processes to enhance compliance effectiveness and scalability.
Serves as a strategic advisor to leadership on regulatory alignment, enterprise risk, and compliance program maturity, while mentoring team members and promoting operational excellence across the seven elements of an effective compliance program.
Establishes architecture oversight and planning for information and network security technologies.
Leads development of an information security risk management program that includes business, regulatory, industry practices and technical environment considerations.
Establishes strategic vendor relationships for security products and services.
Develops enterprise-wide security incident response plans and strategies that includes integration with business, compliance, privacy, and legal constituents and requirements; provides advanced level engineering design functions.
Creates presentations and seeks IT and business management approval and acceptance of significant replacements or reconfigurations of major security technologies serving the Enterprise.
Provides technical guidance and leadership to the technical engineers within the organization.
Must be capable of providing top-tier support for 6 or more of the information security technology common body of knowledge skill sets: 1) Access Control, 2) Application Security, 3) Business Continuity and Disaster Recovery Planning, 4) Cryptography, 5) Information Security and Risk Management 6) Legal, Regulations, 7) Compliance and Investigations, 8) Operations Security, 9) Physical (Environmental) Security, 10) Security Architecture and Design, 11) Telecommunications and Network Security.