Senior Information Security Architect & Risk Strategist

Excellus BlueCross BlueShield; Town of De Witt (NY); Hybrid; USD 88,000 - 198,000; Full time

Job summary

Excellus BlueCross BlueShield is seeking an Information Security Architect to help shape and execute the company’s information security risk management strategy across IT and business units. You will translate risk considerations into secure, scalable, and compliant designs for applications and infrastructure while guiding security investment decisions.

In this role, you will lead architecture principles, mentor staff, collaborate with stakeholders, and ensure protection of member data.

Qualifications

• Five (5) years of experience in an Information Technology Security Role.
• Bachelor’s degree in computer science, information technology or relevant field (or six additional years of experience in lieu of degree).
• Strong communication and influencing skills with the ability to balance differing stakeholder interests through sound analysis and persuasion.
• Ability to work collaboratively with all stakeholders, both inside and outside of the Organization.
• Experience with enterprise security components such as identity and access management, AD/LDAP, MFA, network and application security, and security event management.

Responsibilities

• Participates in development and implementation of security architecture principles and standards that align to the Organization’s overall business and strategy.
• Drives adoption and compliance of security standards across development and infrastructure teams both inside of and under contract with the Organization.
• Creates functional and technical security requirements and sees them through the project lifecycle.
• Executes an overall risk management strategy with key business and divisional stakeholders, including disaster recovery and business continuity planning.
• Performs risk-based assessments of solutions and vendors to ensure appropriate security controls are adhered to.
• Provides security consultation, including design, reviews, and recommendations for various projects and initiatives.
• Supports the team by providing hands-on support for technologies owned and operated by the Security and Risk Department.
• Establishes collaborative working relationships to ensure Information Security risks are managed and solutions align with the business strategy.
• Develops processes, standards, and templates for managing information security risks and supports implementation of new standards and solutions.
• Maintains high standards of integrity and privacy in line with corporate policies.
• Regular and reliable attendance is expected.
• Performs other functions as assigned by management.
• Level II duties: leads development and implementation of security architecture principles and fosters a risk management culture.

Skills

Security architecture

Risk management

Stakeholder communication

Cloud security

Identity and access management

SIEM / log analytics

Network security

Education

Bachelor’s degree in computer science, information technology or related field

Tools

AD/LDAP

Multi-factor authentication

PKI

Firewall

Data loss prevention

SIEM

Job description

Excellus BlueCross BlueShield is seeking an Information Security Architect to help shape and execute the company’s information security risk management strategy across IT and business units. You will translate risk considerations into secure, scalable, and compliant designs for applications and infrastructure while guiding security investment decisions.

In this role, you will lead architecture principles, mentor staff, collaborate with stakeholders, and ensure protection of member data.