Principal IT Security Architect - REMOTE from any EST or CST US-based location

CNO Financial Group, Inc.•St. Louis, MO

8d•$157,800 - $236,800•Remote

About The Position

CNO Financial Group, Inc. is seeking a Principal IT Security Architect to join their IT Team. This role is crucial in defining CNO's enterprise security strategy, architecture, standards, and approach to securing both existing and emerging technologies. The position involves defining security requirements, designing, implementing, and evaluating security solutions, conducting internal and third-party security assessments, and developing security policies, standards, and procedures. The Principal IT Security Architect will collaborate with IT leaders, Enterprise Architects, and other Principal Architects, applying deep technical expertise and industry knowledge to design enterprise-level security architectures. This role will lead security architecture efforts across all cybersecurity domains for new technology implementations, major system changes, and mergers and acquisitions, and will drive updates to architecture, standards, and policies in response to regulatory or business change. The position requires broad and deep information technology experience, strong architectural judgment, and the ability to influence across the organization.

Requirements

Bachelor’s degree in Information Technology or a related field of study, or equivalent experience.
12 years of progressive IT experience with 5+ years’ experience as a security architect or related role.
Demonstrated enterprise-level expertise across core cybersecurity domains, including identity and access management, privileged access management, security operations, incident response, vulnerability management, infrastructure and application security, and business/technology resiliency.
Experience implementing and ensuring compliance with DoD STIG, Critical Infrastructure Protection, FedRAMP or other security requirement frameworks or guides.
A strong ability to apply business and technical knowledge to solving technology and security challenges, including security incident response activities.

Nice To Haves

Masters Degree in Information Technology or a related field of study.
Strong verbal and written communication skills to communicate complex technology concepts, risks and incident occurrences to all levels of an organization, including IT leadership, Third Party Partners, and business partners.
CISSP or other relevant security certifications (CCSP, CISM, SSCP, etc.)
Strong experience across complex enterprise technology environments including operating systems, networking, storage, identity providers, data center infrastructure, cloud service provider architecture, and mainstream platforms (e.g., Microsoft, Oracle, IBM, etc.)

Responsibilities

Defining complex security architectures that are necessary to integrate new entities when a merger or acquisition is complete, including leading various levels of technology resource through the decision-making process.
Communicating complex technical and security concepts in clear, business-focused language to audiences ranging from technical teams to senior and executive leadership.
Analyzing and understanding the impact of regulation changes on security architecture, standards and policies, including making and communicating updates as needed.
Providing guidance and coaching to cybersecurity lead and senior architects and engineers, and providing overall technical expertise to the cybersecurity department and business stakeholders.
Researching, modeling, and tracking secure system standards, industry trends, market technology, potential threats, tactics, and procedures for ecosystem applicability and reference.
Developing formal management reporting dashboards aligned to widely accepted standards, including appropriate metrics that inform senior leadership as to the state of information security risk and exposure.
Effectively communicating risk and mitigation activities to all levels of the organization during incident or risk treatment actions, to inform critical decision-making and deliver risk reductions.
Identifying, quantifying, and documenting requirements to address security risks as they relate to IT and enterprise projects.
Recognizing and identifying potential areas where existing security policies and procedures require change, or where new ones need to be developed, especially regarding future business expansion.
Performing third-party security risk assessments, especially for cloud service providers and responding to third-party requests for information on CNO’s information security program/policies.
Ensuring that the organization is leveraging the proper technologies to meet SOX, PCI, and HIPAA/HITECH compliance requirements.
Serving as a subject matter expert for the incident lead during Incident Response activities.
Leading matrix working groups during Incident Response activities.
Supporting legal and Internal Audit activities and information gathering when needed, and effectively communicating complex security topics to these teams.
Assessing, advising, and supporting AI security initiatives by applying AI governance frameworks, evaluating security posture, identifying adoption risks, and mitigating exploitation threats.