Principal, Corporate Information Security

CoreLogic; Dallas (TX); On-site; USD 134,000 - 165,000; Full time

Benefits offered by this job

PTO & holidays

Parental leave

Health plans

401(k) match

Well-being stipend

Tuition assistance

Rewards & discounts

Job summary

Cotality seeks a Principal, Corporate Information Security to act as a Business Information Security Officer for internal verticals, starting with Insurance. You will balance security with business agility, reviewing architectures, vulnerabilities, and risk maturity while guiding executives on risk decisions.

This role requires CISSP and deep experience in governance frameworks, threat modeling, and security design, with a focus on enabling secure business growth across multiple verticals.

Qualifications

• Bachelor’s degree in IT, Cybersecurity, Computer Science, or 8+ years equivalent senior security experience.
• CISSP is required (exceptions considered for exceptionally qualified candidates); CISM or SABSA are pluses.
• Hands-on experience with vulnerability management tools and translating technical risk to business impact.

Responsibilities

• Advise business leaders on security posture and risk for assigned verticals.
• Review architecture, assessment of vulnerabilities, and risk maturity before go-live.
• Track remediations and translate vulnerabilities into business impact for executives.
• Conduct governance reviews to align IAM controls with enterprise policies; participate in incident response and change control.

Skills

Enterprise risk & architecture

Executive presence

Translation & risk articulation

Governance frameworks

Security design

Collaborative culture

Education

Bachelor’s degree in IT/Cybersecurity/CS

CISSP (required)

CISM

SABSA

Tools

Vulnerability Scanning (Qualys)

Data visualization (Looker/Looker Studio)

GRC platforms (Archer)

AI security controls

Job description

At Cotality, we are driven by a single mission—to make the property industry faster, smarter, and more people-centric. Cotality is the trusted source for property intelligence, with unmatched precision, depth, breadth, and insights across the entire ecosystem. Our talented team of 5,000 employees globally uses our network, scale, connectivity and technology to drive the largest asset class in the world. Join us as we work toward our vision of fueling a thriving global property ecosystem and a more resilient society.

Cotality is committed to cultivating a diverse and inclusive work culture that inspires innovation and bold thinking; it’s a place where you can collaborate, feel valued, develop skills and directly impact the real estate economy. We know our people are our greatest asset. At Cotality, you can be yourself, lift people up and make an impact. By putting clients first and continuously innovating, we’re working together to set the pace for unlocking new possibilities that better serve the property industry.

Job Description:

Role Overview

We are looking for a Principal, Corporate Information Security to step in as a true Business Information Security Officer (BISO) for our internal business verticals. Think of this role as InfoSec Quality Assurance. You will sit directly between our technical security teams and business units—initially focusing on our Insurance business vertical—to evaluate security postures, assess risk maturity, and transition operations from an ad-hoc state to a defined, managed model. We want someone who can wear the CISO hat, guide executive teams to make smart risk decisions, and eventually expand coverage across additional business verticals. We are building a dynamic team and highly encourage professionals from all backgrounds to apply.

What You Will Do

You will act as the primary security advisor for business leaders across assigned verticals. For example, if a team wants to launch a new application or policy, you are the one reviewing architecture, assessing vulnerability data, and evaluating risk maturity before go-live. You will review internal security exceptions, track remediations, and translate technical vulnerabilities into actual business impact so executives understand the risk. You will also run governance reviews to ensure identity and access controls align with enterprise policies, while actively participating in incident response and change control oversight. It is all about finding ways to help the business move fast while staying completely secure.

Core Competencies and Skills

• Enterprise Risk & Architecture
  Deep hands on experience in enterprise risk management and internal security architecture. You know how to threat model internal applications, design compensating controls, and ensure defense in depth principles are applied before a system goes into production.

• Executive Presence & Negotiation
  You are comfortable sitting in a room with a VP who is pushing to launch a project quickly. You have the backbone to hold the line on critical security requirements, but the business acumen to help them find a “secure yes” rather than just saying “no.”

• Translation & Risk Articulation
  You know how to explain complex highly technical concepts using everyday language. Instead of telling a non technical leader about a “CVSS 9.8 vulnerability,” you can translate that into operational or financial risk so they actually understand the business impact.

• Governance Frameworks
  A strong working grasp of governance frameworks like COBIT, NIST CSF, or ISO 27001. More importantly, you know how to operationalize these frameworks so they are actively used by the business, not just sitting in a binder.

• Security Design
  Familiarity with security design models like SABSA is a huge plus. You know how to trace a high-level business objective down to a specific technical control, ensuring security serves the business strategy.

• Collaborative Mindset & Culture Building
  You are a collaborative problem solver who brings diverse perspectives to the table. You act as a bridge between the engineering teams and the business units, actively mentoring others and fostering a security first culture across the organization.

Job Qualifications:

Tools & Technologies

• Vulnerability & Scan Management (Required): Hands-on expertise using Qualys (must-have) and Veracode to evaluate scan outputs, track vulnerabilities, and guide technical teams on remediation. Experience with Black Duck is highly preferred.

• Data & Reporting Visualization (Required): Proficiency in building executive risk dashboards using Google Looker / Looker Studio. Tableau, or Power BI to present actionable security metrics to leadership.

• GRC & Security Ratings (Required): Direct experience working within enterprise GRC platforms (e.g., Archer GRC) and leveraging third-party security rating platforms like BitSight or SecurityScorecard.

• AI Security & Emerging Threats (Strong Differentiator): Ability to evaluate security controls for enterprise AI adoption, including assessing risk around prompt injection, rogue AI, AI agents/zombie agents, and AI data pipeline governance.

Education and Certifications

• Education: Bachelor’s degree in IT, Cybersecurity, Computer Science, or a related field (or 8+ years of equivalent senior security experience).

• Certifications: CISSP is required (rare exceptions considered only for exceptionally qualified candidates, so please still apply). CISM or SABSA certifications are additional pluses.

Annual Pay Range:

134,400 - 165,000 USD

Application Window:

This opportunity is expected to remain posted through the date identified below, subject to business needs.

2026-09-01

Thrive with Cotality

At Cotality, we offer more than just a job, we provide a benefits experience designed to support your whole self. From a flexible working model to competitive time off and standout health coverage with meaningful perks and growth opportunities, our package is built to help you thrive at work and in life.

Highlights, depending on role classification, include:

• Time off: Generous PTO and 11 paid holidays, plus well-being and volunteer time off.

• Family Support: Up to 16 weeks of fully paid parental leave and a baby stipend.

• Health: Multiple medical plan options with mental health and wellness support offerings.

• Retirement: 401(k) with company match and vesting after one year.

• Financial Perks: $400 annual well-being stipend and tuition assistance up to $5,250.

• Extras: Recognition Rewards, Referral bonuses, exclusive discounts and more!

Cotality is an Equal Opportunityemployer committed to attracting and retaining thebest-qualified people available, without regard torace, color, religion, national origin, gender, sexualorientation, gender identity, age, disability or statusas a veteran of the Armed Forces, or any other basisprotected by federal, state or local law. Cotalitymaintains a Drug-Free Workplace.

Cotality is fully committed to a work environment that embraces everyone’s uniquecontributions, experiences and values. We offer anempowered work environment that encouragescreativity, initiative and professional growth andprovides a competitive salary and benefits package. We are better together when we support and recognize our differences.

Privacy Policy

Global Applicant Privacy Policy

By providing your telephone number, you agree to receive automated (SMS) text messages at that number from Cotality regarding all matters related to your application and, if you are hired, your employment and company business. Message & data rates may apply. You can opt out at any time by responding STOP or UNSUBSCRIBING and will automatically be opted out company-wide.

Connect with us on social media! Click on the quicklinks below to find out more about our company and associates