Information Security Strategy and Enablement

Elevance Health•Indianapolis, IN

2d•$139,920 - $228,960•Hybrid

About The Position

The Information Security Strategy and Enablement role develops, recommends, and implements enterprise information security policies, technical standards, guidelines, procedures, and other infrastructure needed to support information security in compliance with company policies, regulatory requirements, and generally accepted information security controls. The role is responsible for selecting and delivering strategic network security, access control, and secure transaction and messaging solutions. The position owns the management and evolution of the Information Security Strategy and Strategic Plan, ensuring alignment with enterprise priorities, business objectives, the changing threat landscape, and leadership direction. It leads strategic planning and review cycles, communicates strategy and progress to executives and the Board, and strengthens governance and execution discipline across Information Security. The role also coordinates strategic priorities across functions, connects strategy with investment and resource decisions, and maintains an enterprise view of risks, dependencies, decisions, and execution barriers. This is a hybrid role requiring associates to work in-office 1–2 days per week. Candidates must live within reasonable commuting distance of a posting location unless an accommodation is granted. The listed locations are Chicago, Illinois, and New York City, New York. The salary range is $139,920–$228,960.

Requirements

Bachelor’s degree in Information Technology or a related field, and at least 8 years of experience in systems administration and information systems security, access management and network security technologies, network communications, computer networking, telecommunications, systems development and management, hardware, software, data, and people; experience across multiple technical and business disciplines is required. An equivalent combination of education and experience is also acceptable.

Nice To Haves

CISSP or other advanced technical security certifications, such as Information Systems Security Architecture Professional, Information Security Engineering Professional, Certification and Accreditation Professional, or equivalent certifications.
Experience planning and designing highly complex systems.

Responsibilities

Own the management and evolution of the Information Security Strategy and Strategic Plan, aligning it with enterprise priorities, business objectives, the evolving threat landscape, and leadership direction.
Lead the strategic planning lifecycle, including annual planning, strategic refreshes, quarterly reviews, and certification of strategic priorities, outcomes, and success measures.
Lead quarterly strategy reviews and certifications with accountable leaders, assessing progress, changes in assumptions, emerging risks, dependencies, and issues requiring leadership attention or intervention.
Develop executive- and Board-level narratives communicating Information Security strategy, progress, outcomes, risks, strategic choices, and required decisions.
Identify emerging trends, risks, opportunities, and enterprise changes that may affect Information Security strategy, and recommend adjustments to priorities or direction.
Strengthen strategy governance and execution discipline, including approaches to measuring progress, maintaining accountability, surfacing dependencies, and connecting strategy to execution.
Coordinate strategic priorities across Information Security and partner with initiative owners, portfolio leaders, Finance, Technology, Risk, and business stakeholders to identify dependencies, resolve barriers, and achieve measurable results.
Connect strategic priorities to investment decisions, resource allocation, and portfolio planning, identifying gaps between strategic ambition and funded execution.
Build partnerships across Technology, Enterprise Risk, Finance, business units, and other stakeholders to integrate Information Security strategy with enterprise priorities, transformation efforts, and planning processes.
Maintain an enterprise view of strategic risks, dependencies, decisions, and execution barriers; escalate issues and drive resolution across accountable leaders and teams.
Develop, recommend, and implement enterprise information security policies, technical standards, guidelines, procedures, and supporting infrastructure.
Support the selection and delivery of strategic network security, access control, and secure transaction and messaging solutions.