Security Architect II

ICW GROUP HOLDINGS; San Diego (CA); On-site; USD 140,000 - 190,000; Full time

Job summary

ICW Group is hiring a Security Architect II to shape enterprise security architecture across platforms, cloud environments, and AI initiatives. You will translate business goals and regulatory obligations into practical security capabilities and patterns.

You will collaborate with multiple teams to embed security into designs, define current- and target-state capabilities, and guide decisions with clear trade-offs and risk analysis.

Responsibilities

• Develops and influences enterprise security architecture and strategic direction.
• Maps business goals, risk appetite, regulatory obligations, and enterprise strategy to security capabilities and technical implementation direction.
• Partners with enterprise, solution, cloud, data, integration, infrastructure, and AI architects to embed security into technology strategies and solution designs.
• Defines current-state and target-state security capabilities, identifies gaps and dependencies, and recommends sequenced initiatives to improve enterprise security maturity.
• Provides architecture guidance for identity and access management, zero trust, network and cloud security, application security, data protection, cryptography, secrets management, logging and monitoring, resilience, vulnerability management, and third-party technology risk.
• Creates decision records and clearly documents security trade-offs, assumptions, risks, compensating controls, and required follow-up actions.
• Defines and maintains security standards, guidelines, and procedures.
• Develops and maintains enterprise security standards, guidelines, control patterns, and procedures within assigned areas of responsibility and contributes to broader enterprise security direction, ensuring the resulting guidance is actionable, internally consistent, and aligned with enterprise policy.
• Uses recognized frameworks and principles such as NIST Cybersecurity Framework, NIST SP 800-53, NIST Zero Trust Architecture, ISO/IEC 27001 and 27002, CIS Controls, and secure-by-design practices as appropriate to the organization.
• Develops and maintains minimum security requirements and approved patterns within assigned areas of responsibility for AWS services, cloud accounts, networking, identity, encryption, key management, secrets, workload protection, observability, and incident readiness.
• Contributes to exception and risk-acceptance criteria and partners with Security, Risk, Compliance, and technology owners to ensure deviations are explicit, time-bound, and appropriately approved.
• Maintains traceability among business objectives, security risks, policies, standards, architecture decisions, technical controls, and implementation evidence.
• Performs and documents security architecture reviews for strategic initiatives, platforms, products, vendor solutions, integrations, and material technology changes.
• Presents security-significant decisions and recommendations to the Architecture Review Board and other governance forums.
• Engages early in initiative planning and solution design to identify threats, misuse cases, trust boundaries, attack paths, security requirements, and control responsibilities.
• Advises teams on secure architecture patterns without displacing accountable engineers

Job description

Are you looking to make an impactful difference in your work, yourself, and your community? Why settle for just a job when you can land a career? At ICW Group, we are hiring team members who are ready to use their skills, curiosity, and drive to be part of our journey as we strive to transform the insurance carrier space. We're proud to be in business for over 50 years, and its change agents like yourself that will help us continue to deliver our mission to create the best insurance experience possible.

Headquartered in San Diego with regional offices located throughout the United States, ICW Group has been named for the twelfth consecutive year in a row and for the 20th time overall as a Top 50 performing P&A Cop organization offering the stability of a large, profitable and growing company combined with a focus on all things people. It's our team members who make us an employer of choice and the vibrant company we are today. We strive to make both our internal and external communities better everyday! Learn more about why you want to be here.

PURPOSE OF THE JOB

The Security Architect II is a senior individual contributor within the Enterprise Architecture team who develops and influences enterprise security architecture direction and establishes frameworks and reusable guidance within assigned areas of responsibility to support the operationalization of security across the enterprise. The role translates business objectives, risk priorities, and regulatory obligations into practical security capabilities, standards, reference architectures, and implementation patterns. Working across business, technology, security, infrastructure, data, and delivery teams, the Security Architect II promotes consistent risk-based decisions and ensures security is designed into enterprise platforms, cloud environments, applications, integrations, data solutions, and emerging AI capabilities.

ESSENTIAL DUTIES AND RESPONSIBILITIES

Develops and influences enterprise security architecture and strategic direction.

• Develops, maintains, and communicates enterprise security architecture frameworks, principles, target-state architectures, reference architectures, roadmaps, and reusable security patterns.
• Maps business goals, risk appetite, regulatory obligations, and enterprise strategy to security capabilities and technical implementation direction.
• Partners with enterprise, solution, cloud, data, integration, infrastructure, and AI architects to embed security into technology strategies and solution designs.
• Defines current-state and target-state security capabilities, identifies gaps and dependencies, and recommends sequenced initiatives to improve enterprise security maturity.
• Provides architecture guidance for identity and access management, zero trust, network and cloud security, application security, data protection, cryptography, secrets management, logging and monitoring, resilience, vulnerability management, and third-party technology risk.
• Creates decision records and clearly documents security trade-offs, assumptions, risks, compensating controls, and required follow-up actions.

Defines and maintains security standards, guidelines, and procedures.

• Develops and maintains enterprise security standards, guidelines, control patterns, and procedures within assigned areas of responsibility and contributes to broader enterprise security direction, ensuring the resulting guidance is actionable, internally consistent, and aligned with enterprise policy.
• Uses recognized frameworks and principles such as NIST Cybersecurity Framework, NIST SP 800-53, NIST Zero Trust Architecture, ISO/IEC 27001 and 27002, CIS Controls, and secure-by-design practices as appropriate to the organization.
• Develops and maintains minimum security requirements and approved patterns within assigned areas of responsibility for AWS services, cloud accounts, networking, identity, encryption, key management, secrets, workload protection, observability, and incident readiness.
• Contributes to exception and risk-acceptance criteria and partners with Security, Risk, Compliance, and technology owners to ensure deviations are explicit, time-bound, and appropriately approved.
• Maintains traceability among business objectives, security risks, policies, standards, architecture decisions, technical controls, and implementation evidence.

Provides security architecture governance and solution guidance.

• Performs and documents security architecture reviews for strategic initiatives, platforms, products, vendor solutions, integrations, and material technology changes.
• Presents security-significant decisions and recommendations to the Architecture Review Board and other governance forums.
• Engages early in initiative planning and solution design to identify threats, misuse cases, trust boundaries, attack paths, security requirements, and control responsibilities.
• Advises teams on secure architecture patterns without displacing accountable engineeri