Cybersecurity Architect

OneMain Financial Group; Irving (TX); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Health and wellbeing options

401(k) matching

Employee Stock Purchase Plan

Tuition reimbursement

Paid time off

Paid sick leave

Paid holidays

Paid volunteer time

Job summary

OneMain Financial is seeking a Senior Security Architect to develop enterprise security architectures aligned with NIST standards and across cloud, on-premises, and hybrid environments. You will translate requirements into secure blueprints and mentor engineers.

You will lead architecture reviews, identify gaps, and guide risk mitigation while collaborating with IT, engineering, and risk teams to ensure compliant, secure deployments.

Qualifications

• 7–10 years of cybersecurity experience with 3+ years in security architecture or similar roles.
• Deep knowledge of NIST frameworks (CSF, SP 800-53, 800-171, 800-207).
• Experience designing and reviewing secure architectures for enterprise systems and cloud environments (AWS, Azure).
• Translate security requirements into implemented controls, configurations, and procedures.
• Strong understanding of IAM, network security, data protection, and application security.

Responsibilities

• Lead architecture and security reviews for new technologies, applications, and systems.
• Identify gaps and risk, advise on mitigation strategies.
• Collaborate with engineering and infrastructure teams to ensure secure deployment of systems and services.
• Provide technical guidance to project and product teams through the SDLC.

Skills

NIST CSF

NIST 800-53

NIST 800-171

NIST 800-207

Identity & Access Management

Network Security

Data Protection

Application Security

GenAI / LLM security

Tools

AWS

Azure

Job description

Architecture & Solution Design

• Develop enterprise-wide security architectures aligned to NIST standards (e.g., NIST CSF, SP 800-53, SP 800-171, SP 800-207).
• Design scalable, secure solutions that address identified risks and business objectives across cloud, on-premises, and hybrid environments.
• Translate business and technical requirements into secure solution blueprints.
• Contribute to the development of reference architectures and security patterns.
• Leverage hands on engineering implementation experience to provide prescriptive guidance on best practices and possible pitfalls.

Solution Review & Risk Mitigation

• Lead architecture and security reviews for new technologies, applications, and systems.
• Identify gaps and weaknesses in proposed solutions and advise on appropriate risk mitigation strategies.
• Collaborate with engineering and infrastructure teams to ensure secure deployment of systems and services.
• Provide technical guidance to project and product teams throughout the system development lifecycle.

Governance & Standards

• Develop and maintain security architecture standards, policies, and control frameworks in alignment with NIST and industry best practices.
• Participate in or lead internal security governance boards and architecture review boards.
• Ensure solutions meet internal risk, compliance, and regulatory requirements (e.g., CCPA, NYDFS, PCI DSS).
• Contribute to maturity assessments and continuous improvement efforts for cybersecurity architecture.

Collaboration & Leadership

• Act as a subject matter expert on cybersecurity architecture for stakeholders across IT, engineering, compliance, and risk teams.
• Mentor junior architects and security engineers.
• Communicate complex technical and risk concepts clearly to business leaders and non-technical audiences.
• Stay up to date on emerging threats, technologies, and changes to the NIST ecosystem.

Required Qualifications

• 7–10 years of experience in cybersecurity, with 3+ years in a security architecture or similar role.
• Deep working knowledge of NIST frameworks (CSF, SP 800-53, 800-171, 800-207 Zero Trust).
• Demonstrated experience designing and reviewing secure architectures for enterprise systems and cloud environments (e.g., AWS, Azure).
• Practical experience translating security architecture requirements into implemented controls, technical configurations, and operational procedures.
• Strong understanding of cybersecurity domains including identity and access management (IAM), network security, data protection, and application security.
• Strong understanding of LLMs, AI, and GenAI solutions including agentic AI and MCP hardening.
• Experience validating control effectiveness through testing, monitoring, evidence collection, or audit support.
• Experience working in a regulated environment and aligning technical controls to compliance frameworks. Excellent communication, collaboration, and documentation skills.

Preferred

• Industry certifications such as CISSP, CISM, CISA, SABSA, or AWS Certified Security.
• Experience with Zero Trust Architecture and modern security models.

• Experience with security automation, control orchestration, policy-as-code, or continuous control monitoring.
• Experience implementing security controls in cloud-native, hybrid, and complex enterprise-scale environments.

• Familiarity with DevSecOps and infrastructure-as-code security.

Who we Are

OneMain Financial (NYSE: OMF) is the leader in offering nonprime customers responsible access to credit and is dedicated to improving the financial well-being of hardworking Americans. Since 1912, we’ve looked beyond credit scores to help people get the money they need today and reach their goals for tomorrow. Our growing suite of personal loans, credit cards and other products help people borrow better and work toward a brighter future.

Driven collaborators and innovators, our team thrives on transformative digital thinking, customer-first energy and flexible work arrangements that grow lives, careers and our company. At every level, we’re committed to an inclusive culture, career development and impacting the communities where we live and work. Getting people to a better place has made us a better company for over a century. There’s never been a better time to shine with OneMain.

Benefits

Because team members at their best means OneMain at our best, we provide opportunities and benefits that make their health and careers a priority. That’s why we’ve packed our comprehensive benefits package for full- and some part-timers with:

• Health and wellbeing options including medical, prescription, dental, vision, hearing, accident, hospital indemnity, and life insurances
• Up to 4% matching 401(k)
• Employee Stock Purchase Plan (10% share discount)
• Tuition reimbursement
• Paid time off (15 days’ vacation per year, plus 2 personal days, prorated based on start date)
• Paid sick leave as determined by state or local ordinance, prorated based on start date
• Paid holidays (7 days per year, based on start date)
• Paid volunteer time (3 days per year, prorated based on start date)