Technical Security Controls Principal

Kemper•Remote-IL, IL

5d•$93,500 - $155,500•Remote

About The Position

Kemper’s Information Security is looking for a highly motivated, diligent, and skillful Technical Security Controls Principal to join the Cybersecurity team focusing on serving as an enterprise subject-matter authority for technical security control architecture, validation, and continuous assurance. The role connects control intent to real technical implementation across identity, endpoint, network, cloud, data, application, and logging domains and requires principal-level judgment, technical depth, and influence.

Requirements

Broad and deep security architecture/control experience across multiple technology domains.
Hands-on ability to review configurations, logs, system data, architecture, technical evidence, and control logic.
Experience designing technical control tests and validating operating effectiveness.
Ability to use scripting, APIs, analytics, or security telemetry to automate evidence collection and continuous monitoring.
Strong understanding of cloud, identity, endpoint, network, application, data-protection, and logging/security-monitoring control patterns.
Typically 10+ years of progressive cybersecurity.
Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, Information Systems, or a related discipline, or equivalent relevant professional experience.

Responsibilities

Define enterprise technical security-control patterns, standards, and design expectations across identity, endpoint, network, cloud, data, application, and logging domains.
Assess whether controls are technically designed and operating as intended using configuration review, data validation, sampling, walkthroughs, and independent challenge.
Develop technical test procedures and evidence standards that move beyond questionnaire or document-only assurance.
Build or sponsor automation, API integrations, telemetry-based analytics, and continuous-control-monitoring use cases.
Translate regulatory and framework requirements into technically meaningful control objectives and identify controls that are administratively present but ineffective.
Lead complex control-gap analysis, remediation design, exception/risk-acceptance evaluation, and closure validation.
Act as a senior technical advisor to Cybersecurity, GRC, Internal Audit, technology teams, and executives on control effectiveness.
Mentor analysts and engineers and establish consistent control-engineering practices.