Lead IT Security Architect - REMOTE from any EST or CST US-based time zone

CNO Financial Group, Inc.•St. Louis, MO

25d•$130,500 - $195,700•Remote

About The Position

CNO Financial Group’s IT Team is hiring a Lead IT Security Architect who will impact the development of CNO’s security architecture standards and approach to adopting new technology. The Lead IT Security Architect secures enterprise information by determining security requirements; planning, implementing, and testing security systems; performing security assessments both internal and third party; preparing security standards, policies, and procedures; consulting with IT team members.

Requirements

Bachelor’s degree in a related discipline, or equivalent experience in lieu of degree.
10+ years of progressive IT experience and 3+ years of experience as a security architect or related role.
The ability to effectively partner with IT and business stakeholders and translate technical concepts to non-technical audiences.
Demonstrated knowledge of AI and machine learning technologies, including associated cybersecurity risks and governance/regulatory considerations.

Nice To Haves

CISSP certification a plus, or other relevant security certifications.
In depth knowledge of information security practices related to PCI, SOX, HIPAA/HITECH, and OWASP application security.
Solid understanding of information security standards and frameworks (NIST, ISO27001, etc.)
Experience implementing security at the application, network and operating system levels.

Responsibilities

Enhance and maintain access governance segregation of duties (SoD) process, including working with business, Audit, and application teams to develop and maintain adequate segregation of duties access controls.
Create security architecture standards for adoption of new technology.
Identify, quantify, and provide design requirements for security risks as they relate to IT and enterprise projects.
Partner with business representatives and IT leaders to define information security strategy and direction.
Develop formal management reporting dashboards aligned to widely accepted standards, including appropriate metrics that inform senior leadership as to the state of information security risk and exposure.
Understand security product / service cost drivers and industry and business trends impacting the information security program.
Recognize and identify potential areas where existing security policies and procedures require change, or where new ones need to be developed, especially regarding future business expansion.
Provide information security subject matter expertise to technology teams and projects.
Evaluate and recommend security software/hardware and its integration into existing architecture.
Perform third party security risk assessment, especially cloud service providers.
Facilitate third party requests for information on CNO’s information security program and policies.
Ensure that the organization is leveraging the proper technologies to meet SOX, PCI, and HIPAA/HITECH compliance requirements.