Principal Information Security Officer (BISO) – Insurance

CoreLogic; Dallas (TX); On-site; USD 134,000 - 165,000; Full time

Benefits offered by this job

PTO & holidays

Parental leave

Health plans

401(k) match

Well-being stipend

Tuition assistance

Rewards & discounts

Job summary

Cotality seeks a Principal, Corporate Information Security to act as a Business Information Security Officer for internal verticals, starting with Insurance. You will balance security with business agility, reviewing architectures, vulnerabilities, and risk maturity while guiding executives on risk decisions.

This role requires CISSP and deep experience in governance frameworks, threat modeling, and security design, with a focus on enabling secure business growth across multiple verticals.

Qualifications

• Bachelor’s degree in IT, Cybersecurity, Computer Science, or 8+ years equivalent senior security experience.
• CISSP is required (exceptions considered for exceptionally qualified candidates); CISM or SABSA are pluses.
• Hands-on experience with vulnerability management tools and translating technical risk to business impact.

Responsibilities

• Advise business leaders on security posture and risk for assigned verticals.
• Review architecture, assessment of vulnerabilities, and risk maturity before go-live.
• Track remediations and translate vulnerabilities into business impact for executives.
• Conduct governance reviews to align IAM controls with enterprise policies; participate in incident response and change control.

Skills

Enterprise risk & architecture

Executive presence

Translation & risk articulation

Governance frameworks

Security design

Collaborative culture

Education

Bachelor’s degree in IT/Cybersecurity/CS

CISSP (required)

CISM

SABSA

Tools

Vulnerability Scanning (Qualys)

Data visualization (Looker/Looker Studio)

GRC platforms (Archer)

AI security controls

Job description

Cotality seeks a Principal, Corporate Information Security to act as a Business Information Security Officer for internal verticals, starting with Insurance. You will balance security with business agility, reviewing architectures, vulnerabilities, and risk maturity while guiding executives on risk decisions.

This role requires CISSP and deep experience in governance frameworks, threat modeling, and security design, with a focus on enabling secure business growth across multiple verticals.