Senior Information Security Architect | Risk & Strategy

Excellus BlueCross BlueShield; City of Utica (NY); On-site; USD 88,000 - 198,000; Full time

Job summary

Excellus BlueCross BlueShield in New York is seeking an Information Security Architect to develop and execute risk-based security programs and architecture across the enterprise. You will advise leadership, shape security controls, and drive compliant, cost-effective designs for applications and infrastructure.

You will collaborate with IT and business teams, perform risk-based assessments, and lead security initiatives, ensuring privacy and regulatory alignment across the organization.

Qualifications

• Five or more years in an IT security role with leadership potential.
• Strong ability to influence and balance stakeholder interests.
• Experience with enterprise security components and IAM.
• Knowledge of regulatory and security standards relevant to healthcare.

Responsibilities

• Develop and implement security architecture principles aligned to business strategy.
• Ensure compliance with security standards across development and infrastructure teams.
• Perform risk-based assessments of solutions and vendors.
• Provide security consultation for projects and initiatives.
• Support security technologies and collaborate across divisions.
• Mentor staff and foster a risk-management culture.

Skills

Security architecture

Risk management

Communication

Stakeholder management

Vendor coordination

Mentoring

Business continuity planning

Disaster recovery planning

Threat assessment

Regulatory compliance

Scripting

TCP/IP knowledge

IAM concepts

Education

Bachelor’s degree in computer science, information technology or relevant field

In lieu of a degree, six (6) additional years of experience

Security industry certification (CISSP/CISA/CISM/SANS)

Tools

AD/LDAP

Multi-factor authentication

SIEM

Firewall architecture

Cloud security controls

PKI

Job description

Excellus BlueCross BlueShield in New York is seeking an Information Security Architect to develop and execute risk-based security programs and architecture across the enterprise. You will advise leadership, shape security controls, and drive compliant, cost-effective designs for applications and infrastructure.

You will collaborate with IT and business teams, perform risk-based assessments, and lead security initiatives, ensuring privacy and regulatory alignment across the organization.