InfoSec Strategy Lead - Hybrid (VA)

The Elevance Health Companies, Inc.; Ashburn (VA); Hybrid; USD 112,000 - 193,000; Full time

Job summary

Elevance Health is seeking an Info Security Advisor (US) in Ashburn, VA, a hybrid role requiring in-office presence 1–2 days weekly. You will deliver security policy, standards, and control implementations aligned with enterprise requirements and regulatory obligations.

Responsibilities include leading design and troubleshooting for access control, network security, and incident response. The role requires 5+ years in information security and a BS/BA in IT or a related field.

Qualifications

• Requires BS/BA degree in Information Technology or related field and 5+ years in related roles.
• Requires experience designing highly complex systems.

Responsibilities

• Provides first level engineering design functions and trouble resolution.
• Acts as technical escalation on complex problems.
• Leads or plans implementations for access management and network security technologies.
• Develops testing plans to ensure quality of implementation.
• Leads investigation and reporting of data security events and incidents.
• Provides system and network architecture support for information and security technologies.
• Supports risk assessments and implementation of security procedures and technologies.
• Maintains security incident response plans.
• Oversees vendor services and strategy updates.
• Coordinates with analysts during incident recovery and root cause analysis.

Skills

Access Control

Application Security

Business Continuity & Disaster Recover

Cryptography

Information Security & Risk Management

Legal / Regulations

Compliance & Investigations

Operations Security

Physical Security

Security Architecture & Design

Telecommunications & Network Security

Education

BS/BA in Information Technology or related field

Tools

SailPoint

ServiceNow

SAST/DAST tools

Cloud security tools

Job description

Elevance Health is seeking an Info Security Advisor (US) in Ashburn, VA, a hybrid role requiring in-office presence 1–2 days weekly. You will deliver security policy, standards, and control implementations aligned with enterprise requirements and regulatory obligations.

Responsibilities include leading design and troubleshooting for access control, network security, and incident response. The role requires 5+ years in information security and a BS/BA in IT or a related field.