Cyber Operations and Threat Management - Sr Mgr

Blue Cross Blue Shield of Arizona; Phoenix (AZ); Hybrid; USD 150,000 - 200,000; Full time

Job summary

Blue Cross Blue Shield of Arizona seeks a Cyber Risk & Technical Security Leader to drive enterprise cybersecurity across AI risk management, network, cloud and application security. The role blends strategic leadership with hands-on execution to reduce risk and modernize security operations for an AI-enabled enterprise.

The position partners with technical, IT, data, and business teams to embed security into AI, cloud, applications, and networks, while aligning with CISO guidance to protect

Qualifications

• 12 years of progressive experience in cybersecurity/IT.
• 5 years of leadership experience with supervisory responsibilities.
• Experience leading security initiatives across multiple domains.
• Experience integrating AI into security operations.
• Disaster recovery and operational resilience planning experience.
• Strong collaboration across technical and business teams.
• Proven ability to prioritize solutions with limited direction.

Responsibilities

• Lead and execute enterprise cybersecurity capabilities across AI risk management, network, cloud and application security.
• Partner with IT, data, and business teams to embed security into AI, cloud, apps, and networks.
• Support and implement cybersecurity direction from the CISO to preserve data privacy.

Skills

Cybersecurity leadership

AI risk management

Zero Trust

Security operations

Threat monitoring

Education

Bachelor’s degree in IT

Job description

Awarded a Healthiest Employer, Blue Cross Blue Shield of Arizona aims to fulfill its mission to inspire health and make it easy.AZ Blue offersa variety of health insurance products and services to meet the diverse needs of individuals, families, and small and large businesses as well as providing information and tools to help individuals make better health decisions.

At AZ Blue, we have a hybrid workforce strategy, called Workability, that offers flexibility with how and where employees work. Our positions are classified as hybrid, onsite or remote. While the majority of our employees are hybrid, the following classifications drive our current minimum onsite requirements:

• Hybrid People Leaders: must reside in AZ, required to be onsite at least twice per week

• Hybrid Individual Contributors: must reside in AZ, unless otherwise cited within this posting, required to be onsite at least once per week

• Hybrid 2 (Operational Roles such as but not limited to: Customer Service, Claims Processors, and Correspondence positions): must reside in AZ, unless otherwise cited within this posting, required to be onsite at least once per month

• Onsite: daily onsite requirement based on the essential functions of the job

• Remote: not held to onsite requirements, however, leadership can request presence onsite for business reasons including but not limited to staff meetings, one-on-ones, training, and team building

Please note that onsite requirements may change in the future, based on business need, and job responsibilities. Most employees should expect onsite requirements and at a minimum of once per week.

This position is hybrid within the state of AZ only. This hybrid work opportunity requires residency in the State of AZ, and work to be performed 2 days per week in office.

PURPOSE OF THE JOB

• The Cyber Risk & Technical Security Leader is responsible for leading and actively executing enterprise cybersecurity capabilities across AI risk management, network, cloud and application security, emerging threat defense, and security automation.
• This role operates as both a strategic leader and hands-on executor, driving measurable risk reduction while modernizing security operations for the AI-enabled enterprise.
• The position partners across technical, IT, data, and business teams to embed security into AI, cloud, applications, and networks, while evolving defenses against rapidly changing threat landscapes and adversarial AI risks.
• This position supports and implements Corporate Information Security direction set forth by the Chief Information Security Officer (CISO) that assures BCBSAZ’s customers that BCBSAZ is a secure company that intends to preserve the privacy and confidentiality of data and will remain their health insurance company.

REQUIRED QUALIFICATIONS

1. Required Work Experience

• 12 years of progressive experience in cybersecurity/IT, including system security, cloud, application, or data security domains
• 5 years of leadership experience, including direct management or supervisory responsibilities
• Demonstrated experience leading and executing security initiatives (player-Demonstrated experience in implementing, advancing, and monitoring/reducing security risk:
  • Driving and reducing security risk across multiple domains supporting Zero Trust principles (e.g., system, business applications, networks, hybrid data centers).
  • Security modernization initiatives working in IT and/or cybersecurity [e.g., identity-based attacks, non-human identity management, secure service edge (SSE) implementations, hybrid cloud data center configurations] with a focus on maximizing security capabilities.
  • Managing and responding to new and emerging threats (e.g., ransomware, identity-based attacks, AI-based attacks).
  • AI risk management and adversarial AI protection
    • Managing and mitigating evolving AI risks
    • Advancing technical security operations functions with AI-based automation and response
• 3 years of experience driving or supporting security automation and operational efficiency
• Experience leading the development and execution of technical initiatives that integrate AI into security operations to improve efficiency, effectiveness, and threat response.
• Experience in supporting disaster recovery and/or operational resilience planning and execution.
• Demonstrated experience:
  • Solving complex problems with limited direction prioritizing solutions under their control
  • Collaborating across technical and business teams
  • Driving outcomes with high ownership and initiative

1. Required Education

• Bachelor’s degree in business, information technology, computer systems, or related field.

Alternatively, proven track record of technical expertise, qualifying as a degree-equivalent through extensive field experience.

2. Required Licenses

• N/A

3. Required Certifications

• N/A

PREFERRED QUALIFICATIONS

1. Preferred Work Experience

• 12+ years of progressive experience in cybersecurity/IT, including system security, cloud, application, or data security domains
• 5+ years of leadership experience, including direct management or supervisory responsibilities
• Demonstrated experience leading and executing security initiatives (player-coach model)
• Demonstrated experience in