Principal Information Security Officer (BISO)

330779353 CoreLogic Solutions, LLC; United States; Remote; USD 134,000 - 172,000; Full time

Benefits offered by this job

Generous PTO and holidays

Parental leave benefits

Health plans and wellness options

401(k) with company match

Tuition assistance

Job summary

Cotality is seeking a Principal, Corporate Information Security to act as the Business Information Security Officer for internal business units, starting with Insurance. You will bridge security and business teams, review architectures, assess risk maturity, and guide executive decisions toward secure outcomes.

Lead governance reviews, translate technical risk into business impact, and help scale security programs while fostering a security-first culture across the organization.

Qualifications

• Bachelor’s degree in IT, Cybersecurity, CS or equivalent experience.
• CISSP required; CISM or SABSA a plus.
• Experience with enterprise risk management and security architecture.
• Ability to translate technical risk into business impact.

Responsibilities

• Advise business leaders across verticals on security architecture and risk before go-live.
• Review security exceptions and track remediation, translating findings for execs.
• Lead governance reviews matching identity/access controls to enterprise policies.
• Help expand security coverage across additional business units.

Skills

Enterprise risk & architecture

Executive presence

Translation & risk articulation

Governance frameworks

Security design

Collaborative mindset

Education

Bachelor’s degree in IT/Cybersecurity/CS

Tools

Qualys

Veracode

Looker/BI tools

GRC platforms (Archer)

BitSight/SecurityScorecard

Job description

Cotality is seeking a Principal, Corporate Information Security to act as the Business Information Security Officer for internal business units, starting with Insurance. You will bridge security and business teams, review architectures, assess risk maturity, and guide executive decisions toward secure outcomes.

Lead governance reviews, translate technical risk into business impact, and help scale security programs while fostering a security-first culture across the organization.