Technical Security Controls Principal

Kemper; United States; Remote; USD 94,000 - 156,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401K

Paid Time Off

Tuition Assistance

Job summary

Kemper's Information Security team seeks a Technical Security Controls Principal to serve as an enterprise authority for security-control architecture, validation, and continuous assurance. The role spans identity, endpoint, network, cloud, data, and logging domains with a focus on translating regulatory requirements into effective control objectives.

The candidate will lead control-gap analyses, design remediation, and advocate automation and analytics to monitor control effectiveness.

Qualifications

• Broad and deep security architecture/controls experience across multiple technology domains.
• Hands-on ability to review configurations, logs, system data, architecture, and control evidence.
• Experience designing technical control tests and validating operating effectiveness.

Responsibilities

• Define enterprise technical security-control patterns and design expectations across identity, endpoint, network, cloud, data, application, and logging domains.
• Assess whether controls are designed and operating as intended using configurations, data validation, sampling, walkthroughs, and independent challenge.
• Develop technical test procedures and evidence standards beyond document-only assurance.
• Build or sponsor automation, API integrations, telemetry-based analytics, and continuous-control-monitoring use cases.
• Translate regulatory and framework requirements into technically meaningful control objectives and identify ineffective controls.
• Lead complex control-gap analysis, remediation design, exception/risk-acceptance evaluation, and closure validation.
• Act as a senior technical advisor to Cybersecurity, GRC, Internal Audit, technology teams, and executives on control effectiveness.
• Mentor analysts and engineers and establish consistent control-engineering practices.

Skills

Security architecture

Control testing

Automation scripting

Cloud security

Logging & monitoring

Education

Bachelor’s degree or equivalent

Tools

Scripting/APIs

Security telemetry

Analytics

Job description

Location(s) Remote-AL, Remote-FL, Remote-GA, Remote-IL Details Kemper is one of the nation’s leading specialized insurers. Our success is a direct reflection of the talented and diverse people who make a positive difference in the lives of our customers every day. We believe a high-performing culture, valuable opportunities for personal development and professional challenge, and a healthy work-life balance can be highly motivating and productive. Kemper’s products and services are making a real difference to our customers, who have unique and evolving needs. By joining our team, you are helping to provide an experience to our stakeholders that delivers on our promises.

Kemper’s Information Security is looking for a highly motivated, diligent, and skillful Technical Security Controls Principal to join the Cybersecurity team focusing on serving as an enterprise subject‑matter authority for technical security control architecture, validation, and continuous assurance. The role connects control intent to real technical implementation across identity, endpoint, network, cloud, data, application, and logging domains and requires principal‑level judgment, technical depth, and influence.

Key Responsibilities

• Define enterprise technical security‑control patterns, standards, and design expectations across identity, endpoint, network, cloud, data, application, and logging domains.
• Assess whether controls are technically designed and operating as intended using configuration review, data validation, sampling, walkthroughs, and independent challenge.
• Develop technical test procedures and evidence standards that move beyond questionnaire or document‑only assurance.
• Build or sponsor automation, API integrations, telemetry‑based analytics, and continuous‑control‑monitoring use cases.
• Translate regulatory and framework requirements into technically meaningful control objectives and identify controls that are administratively present but ineffective.
• Lead complex control‑gap analysis, remediation design, exception/risk‑acceptance evaluation, and closure validation.
• Act as a senior technical advisor to Cybersecurity, GRC, Internal Audit, technology teams, and executives on control effectiveness.
• Mentor analysts and engineers and establish consistent control‑engineering practices.

Qualifications

• Broad and deep security architecture/control experience across multiple technology domains.
• Hands‑on ability to review configurations, logs, system data, architecture, technical evidence, and control logic.
• Experience designing technical control tests and validating operating effectiveness.
• Ability to use scripting, APIs, analytics, or security telemetry to automate evidence collection and continuous monitoring.
• Strong understanding of cloud, identity, endpoint, network, application, data‑protection, and logging/security‑monitoring control patterns.
• Typically 10+ years of progressive cybersecurity.
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, Information Systems, or a related discipline, or equivalent relevant professional experience.

The range for this position is 93,500-155,500. When determining candidate offers, we consider experience, skills, education, certifications, and geographic location among other factors. This job is also eligible for our Kemper benefits package (Medical, Dental, Vision, PTO, 401K, etc.)

Kemper is proud to be an equal opportunity employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran, disability status or any other status protected by the laws or regulations in the locations where we operate. We are committed to supporting diversity and equality across our organization and we work diligently to maintain a workplace free from discrimination.

Kemper does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Kemper and Kemper will not be obligated to pay a placement fee. Kemper will never request personal information, such as your social security number or banking information, via text or email. Additionally, Kemper does not use external messaging applications like WireApp or Skype to communicate with candidates. If you receive such a message, delete it.

Kemper at a Glance The Kemper family of companies is one of the nation’s leading specialized insurers. With approximately $12 billion in assets, Kemper is improving the world of insurance by providing affordable and easy‑to‑use personalized solutions to individuals, families and businesses through its Kemper Auto and Kemper Life brands. Kemper serves over 4.4 million policies, is represented by approximately 24,100 agents and brokers, and has approximately 7,000 associates dedicated to meeting the ever‑changing needs of its customers.

*Alliance United Insurance Company is not rated. We value diversity and strive to be an employer of choice. An Equal Opportunity Employer, M/F/D/V Eligible employees may enjoy benefits such as:

• Qualify for your choice of health and dental plans within your first month.
• Save for your future with robust 401(k) match, Health Spending Accounts and various retirement plans.
• Learn and Grow with our Tuition Assistance Program, paid certifications and continuing education programs.
• Contribute to your community through United Way and volunteer programs.
• Balance your life with generous paid time off and business casual dress.
• Get employee discounts for shopping, dining and travel through Kemper Perks.

Benefits eligibility may vary based on position classification, scheduled hours, work location, temporary or contingent status, independent contractor status, SkillBridge participation, and applicable plan terms.