Cybersecurity Architect

HealthPartners; BLOOMINGTON (MN); Remote; USD 92,000 - 139,000; Full time

Job summary

HealthPartners is seeking a Cybersecurity Architect to define and govern enterprise cybersecurity architecture strategy across our integrated health plan and care delivery environment.

The role partners with executive stakeholders to shape security roadmaps, architect patterns, and governance across complex regulatory landscapes, ensuring secure, scalable digital transformation while enabling business and clinical objectives.

Qualifications

• Bachelor's degree in information security, cybersecurity, information assurance, CS or related field.
• Ten years of progressive experience in information security, cybersecurity, or related IT information security discipline.
• Three years of enterprise or cybersecurity architecture accountability, including standards, roadmaps and governance.
• CISSP certification.
• Healthcare payer/provider knowledge incl. regulatory, privacy, cybersecurity requirements.
• Deep expertise in enterprise and cybersecurity architecture frameworks and best practices.
• Ability to communicate complex technical concepts to executive leadership.

Responsibilities

• Defines and owns the enterprise cybersecurity architecture strategy and target-state vision.
• Establishes architectural principles, standards, procedures, and controls across the organization.
• Aligns cybersecurity architecture with enterprise business, clinical, and technology strategies.
• Guides long-term cybersecurity investment and modernization decisions.
• Mentors analysts and engineers, promoting secure-by-design practices.
• Drives architecture governance and collaboration across domains.

Skills

CISSP

Executive communication

Cybersecurity architecture

Regulatory knowledge

Enterprise security

Education

Bachelor's degree in Information Security/CS/Engineering

Tools

SABSA

TOGAF

NIST SP800-160

ISO 27001

Job description

HealthPartners is hiring a Cybersecurity Architect. The Cybersecurity Architect serves as a technical authority responsible for defining and governing enterprise-wide cybersecurity architecture strategy across HealthPartners' integrated healthcare payer and provider organization. This highly visible role drives the long-term cybersecurity vision, ensuring alignment with business, technology, and clinical objectives while establishing the architectural standards and controls necessary to enable secure, scalable digital transformation.

As a strategic partner, the Cybersecurity Architect partners with executive stakeholders, technology leaders, and engineering teams to influence cybersecurity investments, guide technology roadmaps, and provide architectural leadership across a complex and highly regulated environment. It leads the development of cybersecurity frameworks, reference architectures, and reusable security patterns that improve delivery efficiency, strengthen risk management practices, and support innovation across the enterprise.

This role is critical to advancing HealthPartners' cybersecurity maturity by providing dedicated cybersecurity architecture guidance separate from operational tool ownership and people management responsibilities. Through strategic planning, governance, and secure-by-design principles, the Cybersecurity Architect helps accelerate technology onboarding, improve consistency in cybersecurity implementation, reduce exceptions and rework, strengthen audit and compliance outcomes, and lowers the long-term cost of managing cybersecurity risk.

Reporting to the Manager, Cybersecurity Engineering and Architecture, this position joins a collaborative team of six security professionals focused on protecting HealthPartners' systems, data, and digital assets.

Required Qualifications:

• Bachelor's degree in Information Security, Cybersecurity, Information Assurance, Computer Science, Computer Engineering, or a related field.
• Ten (10) years of progressive experience in information security, cybersecurity, or a related IT information security discipline.
• Three (3) years of experience with enterprise or cybersecurity architecture accountability, including ownership of architectural standards, roadmaps, and governance.
• Certified Information Systems Security Professional (CISSP) certification
• Knowledge of healthcare payer and provider environments, including applicable regulatory, privacy, and cybersecurity requirements.
• Deep expertise in enterprise architecture and cybersecurity architecture frameworks, methodologies, and best practices.
• Demonstrates ability to communicate complex technical concepts to executive leadership and influence strategic decision-making.

Preferred Qualifications:

• Graduate degree in Information Security, cybersecurity, Information Assurance, Computer Science, Computer Engineering, or a related field.
• Twelve (12) years of progressive experience in information security, cybersecurity, or a related IT security discipline.
• Four (4) years of experience providing enterprise or cybersecurity architecture leadership, including accountability for architecture strategy, governance, and technology standards.
• Knowledge of frameworks such as SABSA, TOGAF, NIST SP800-160, or ISO 27001.
• Previous experience working in the health care industry.

Hours/Location:

• M-F; core business hours
• This is a primarily remote position with occasional onsite attendance required based on business needs. Candidates located within the local or regional area are preferred to facilitate participation in onsite meetings and team collaboration activities.
• This role includes occasional off-hours support and project work and helps ensure the team provides appropriate after-hours on-call coverage.

Compensation Range:

• $67.65 - $101.47 hourly
  • Compensation is based on the level and requirements of the role. Pay within our ranges may also be determined by education, experience, knowledge, skills, location, and abilities as well as internal equity. Hired candidates may be eligible to receive additional compensation based on role (e.g., shift differential, bonus, sales incentive, productivity pay, etc.).

Responsibilities:

• Enterprise Cybersecurity Architecture Strategy and Vision.
  • Defines and owns the enterprise cybersecurity architecture strategy and target-state vision.
  • Establishes architectural principles, standards, procedures and controls across the organization.
  • Aligns cybersecurity architecture with enterprise business, clinical, and technology strategies.
  • Guides long-term cybersecurity investment and modernization decisions.
• Governance, Risk & Regulatory Leadership
  • Provides architectural leadership for HIPAA, HITRUST, CMS, PCI DSS, NACHA, and other regulatory frameworks.
  • Oversee cybersecurity architecture governance, review boards, and exception processes.
  • Partners with risk, compliance, legal, and audit leaders to manage enterprise cybersecurity risk.
  • Ensures consistent interpretation and application of cybersecurity controls across domains.
• Complex Architecture and Cross-Domain Design Authority
  • Leads cybersecurity architecture for complex, enterprise-wide initiatives.
  • Resolves design conflicts across applications, cloud, infrastructure, data, and clinical platforms.
  • Architects secure integration patterns across legacy and modern ecosystems
  • Serves as final escalation point for cybersecurity architecture decisions.
• Cloud, Zero Trust and Advanced Cybersecurity Capabilities
  • Drives adoption of zero trust, cloud-native security, and advanced protection models.
  • Defines enterprise patterns for identity-centric security, data-centric protection, and observability.
  • Evaluates and guides adoption of new cybersecurity technologies and platforms.
  • Ensures scalability and resilience of cybersecurity architectures.
• Executive Advisory and Stakeholder Influence
  • Acts as a strategic cybersecurity advisor to CTO, CISO, and senior technology leaders.
  • Translate complex cybersecurity concepts into business-relevant insights.
  • Influences roadmap prioritization and funding through architectural recommendations.
  • Represents cybersecurity architecture in enterprise planning and governance forums.
• Talent Development and Architecture Maturity
  • Mentor senior analysts and engineers, setting expectations for architectural excellence.
  • Builds and evolve cybersecurity architecture practices, methods, and documentation.
  • Promotes a culture of secure-by-design and shared accountability.
  • Drives continuous improvement of cybersecurity architecture maturity.