Security Engineer

• Lead and manage Security Analysts responsible for security operations center (SOC) activities and security administration
• Oversee daily security monitoring, event triage, escalation handling, and incident response coordination
• Establish team priorities, assign work, and ensure timely completion of operational security tasks and remediation activities
• Develop and report on security operations metrics, trends, and performance indicators
• Oversee administration of security tools, including monitoring platforms, endpoint protection, vulnerability management, and access controls
• Manage user access administration, privileged access review support, and periodic access validation processes
• Ensure security controls are functioning effectively and that issues are tracked, escalated, and remediated
• Maintain team procedures, runbooks, and documentation for security operations and incident response
• Support the implementation, tuning, and effectiveness of security tools and monitoring capabilities
• Lead incident detection and response activities, including escalation to leadership when appropriate
• Coordinate with IT and system owners on containment, remediation, recovery, and lessons learned
• Monitor emerging threats and vulnerabilities and direct team focus accordingly
• Support audit readiness, assessments, and operational response exercises
• Manage, coach, and develop Security Analysts, including performance management and career development
• Promote consistency in investigation, documentation, escalation, and communication practices
• Partner with the CISO on staffing, workload planning, and operational maturity initiatives
• Collaborate with Audit, Risk, Compliance, and IT teams on control validation and issue remediation
• Support third-party reviews and audit follow-up activities
• Escalate material risks, control gaps, and resource concerns to the CISO
• Ensure alignment with organizational policies, standards, and regulatory requirements

Information Security Manager

• Driving security risk management and action across assigned lines of business and supporting technologies
• Representing the Chief Information Security Officer (CISO) on business-line-specific security matters
• Maintaining key stakeholder relationships up to the Management Committee level
• Operating as trusted security advisors, bridging business and technology organizations while monitoring changes in the business, technology, and threat landscape
• Clearly communicating, translating, and prioritizing security requirements in support of business operations and strategic initiatives
• Elevating business-specific risks, needs, and insights back into the Information Security organization
• Improving the effectiveness and value of security programs by ensuring risks are proactively identified, assessed, and addressed
• Partnering closely with business line risk teams, technology leaders, and control functions to drive measurable improvements in security posture
• Leading the reporting, governance, and execution of key security metrics and performance targets across business lines
• Maintaining a strong understanding of the technical and process controls that protect the Bank’s systems and information from cyber threats, including malware and other attack vectors
• Providing leadership across the BISO function, influencing strategic direction, mentoring and coaching peers, and promoting consistency in execution and best practices across the enterprise

Business Information Security Officer

• Designs and executes critical aspects of the Enterprise Security Risk Management function.
• Develops, recommends and implements controls and cost-effective approaches to minimize the organization's risks effects.
• Partners with the business and technology teams to promote understanding of the business landscape in order to facilitate security risk-based discussions.
• Collaborates with executive and technical leadership to embed a security-focused mindset in all areas.
• Analyzes organizational security risks, interactions, develop and publish security risk handbook, and procedures for implementation ensuring alignment with appropriate standards and frameworks.
• Manage and execute risk identification, assessment and quantification, aggregation reporting, and monitoring processes.
• Interprets internal or external business issues and recommends solutions/best practices.
• Solves complex problems; takes a broad perspective to identify solutions.
• Analyzes external market dynamics and other data sources to assess trends and develop actionable insights and recommendations to management, via understanding of the business model and the information available for analysis.
• Assist in coordinating the security risk within the context of the security risk model.
• Assesses and communicates information regarding business risks with functions across the organization.
• Builds and maintains relationships with business partners, including understanding their specific risk landscape.
• Uses professional knowledge, skills, and experience to influence and guide, monitor, and credibly challenge business areas as they manage risk and make risk decisions.
• Coordinates the security risk program efforts including risk modeling, comprehensive periodic risk assessments, and regulatory reporting standards and expectations.
• Develops presentations appropriate for senior level audiences and external regulators.
• May mentor and give work direction to less experienced colleagues.

Principal Security Risk Analyst

• Manage a portfolio of strategic partnerships
• Lead regular business reviews and strategic planning sessions with partners
• Identify, source, and negotiate new partnership opportunities
• Execute co-selling and co-marketing initiatives with strategic partners
• Drive partner-sourced and partner-influenced pipeline in collaboration with Sales
• Work across organizations to ensure successful partnerships and alignment with company goals
• Influence product roadmap through partner and customer insights
• Build and maintain relationships with top customers of strategic partners

Sales Executive – Identity Security Business Development

• defines the standard for Humana's cybersecurity and technology-related risk management approach
• identifies and reports on related risk
• designs, develops, and performs information security and technology risk assessments
• develops and oversees the cybersecurity and technology-related risk management initiatives, programs, and projects for Humana
• makes decisions regarding own work methods with minimal direction and occasional ambiguity

Cybersecurity Professional

• Collaborate with the Third‑Party Risk Management team and the business to evaluate new applications and services, assess security controls, and ensure alignment with enterprise security requirements.
• Collaborate with IT teams to enforce security standards that enable secure technology solutions.
• Provide security guidance with a holistic view of how security configuration changes impact Security Operations , GRC compliance requirements, and Security Engineering workflows and tooling.
• Evaluate proposed application and platform configuration changes from business and Security Engineering teams, analyze their impact on the security posture and architectural standards , and make recommendations.
• Support cross-functional adoption of security controls for IaaS/PaaS/SaaS, including reference architectures and guardrails.
• Deliver security guidance related to creating and deploying network security controls such as firewall access control lists (ACLs).
• Assess changes in the external threat landscape using threat intelligence and collaborate with technology teams to guide the implementation of appropriate defensive controls.
• Teach, lead, and influence IT and security teams to incorporate security into enterprise and client-facing projects and applications.
• Assist in developing enterprise security standards aligned to industry frameworks (e.g. CIS Critical Security Controls), and partner with the business to ensure controls are clearly understood and effectively applied across technologies and use cases.
• Partner with the Cyber Security Product team to evaluate security tools to ensure they meet business needs, security requirements, and architectural standards. This includes assessing integration with existing systems and presenting clear, actionable recommendations to stakeholders.
• Use workflow automation platforms to streamline processes, reduce manual effort, and improve operational efficiency.

Senior Architect – Cyber Security

• Design, implement, and maintain LAN/WAN infrastructure across headquarters, branches, and remote locations
• Manage routers, switches, firewalls, VPNs, and wireless networks
• Monitor network performance and proactively address capacity, reliability, and latency issues
• Implement and maintain secure network architectures aligned with banking regulatory requirements
• Conduct regular vulnerability assessments and remediation efforts
• Lead troubleshooting efforts for network outages and service disruptions
• Lead or contribute to IT infrastructure projects, including upgrades, migrations, and new branch deployments

Network Security Engineer

• Design, implement, and maintain server infrastructure in Windows and/or Linux.
• Administer core infrastructure services including Active Directory, DNS, DHCP, Group Policy, and Office 365.
• Manage virtualization and hosting platforms (VMware, Scale Computing).
• Apply system updates, patches, and configuration standards.
• Monitor system performance, availability, and capacity.
• Work with managed service providers (MSP) to support backup, recovery, and disaster recovery solutions.
• Troubleshoot and resolve complex system-level issues.
• Implement and maintain security controls to protect systems, networks, and data.
• Monitor security tools and logs to detect threats and anomalies.
• Respond to and support investigation of security incidents.
• Conduct vulnerability assessments and coordinate remediation efforts.
• Enforce identity and access management principles, including least privilege and multi-factor authentication MFA.
• Apply system and network hardening standards.
• Support audits and compliance requirements as applicable.
• Automate routine systems and network tasks using scripting or automation tools.
• Create and maintain technical documentation, runbooks, and standard operating procedures.
• Collaborate with IT support teams, application teams, and vendors.
• Provide technical guidance and serve as an escalation point when needed.

Systems & Security Engineer

• Lead all facility-related responsibilities and security operations across the organization
• Oversee facility management, leasing, and compliance
• Manage personnel clearances, secure facilities, and physical security programs
• Ensure compliance with all government security requirements and regulations
• Conduct regular security assessments and implement improvements

Facility Security Officer

• Develop, configure, and manage security policies to ensure the protection of data
• Compliance with regulations and prevention of security threats
• Work closely with security teams, network engineers, and application administrators
• Implement and enforce policies that align with the organization’s security strategy and business goals
• Implements and supports security solutions and technologies to protect data/assets from unauthorized access
• Provides project leadership, security oversight, and risk management on security projects
• Sets security design guidelines, frameworks, and models
• Works to identify new security issues and risks and develops mitigation plans
• Helps identify and document security objectives
• Participates in projects that develop new intellectual property
• Trains/mentors members of the team
• Builds relationships and trust across the organization
• Evaluates and recommends new and emerging security products and technologies
• Supports acquisition and vendor risk assessment due diligence
• Leads the building, deployment, and maintenance of security tools utilized by the insider threat program
• Proactively seeks solutions to mitigate risk and clearly communicate risks to the appropriate stakeholders
• Monitor the performance and availability of the Netskope platform using tools like Prometheus, Grafana
• Develop and maintain incident response processes for handling system outages, performance degradation, or security incidents
• Participate in on-call rotations to provide 24/7 support for critical issues
• Conduct root cause analysis (RCA) post-incident to identify systemic issues and implement corrective measures to prevent recurrence
• Design and implement strategies for platform scalability to support growth in users, traffic, and security demands
• Work with security teams to ensure the Netskope platform is secure by regularly performing vulnerability assessments
• Develop and maintain disaster recovery (DR) and business continuity plans to ensure the Netskope platform can recover from catastrophic failures

Senior Info Security Engineer – Netskope ZTNA Platform

• Define and lead Thrivent’s strategy for defending against emerging external AI-powered threats
• Protect the enterprise from adversarial AI capabilities, including automated vulnerability discovery and AI-driven attack campaigns
• Translate rapidly evolving external threats into practical, scalable protections across the organization
• Create the enterprise strategy for defending against AI-enabled threats
• Establish architecture for detection, prevention, and response capabilities
• Drive integration of AI threat detection and controls into existing cyber defense tooling
• Lead development of detection and response mechanisms for AI-driven attacks
• Partner with Cyber Defense teams to operationalize detections and response playbooks
• Mentor engineers and elevate AI security capabilities within teams
• Influence senior leadership on AI risk posture and necessary investments

Principal Engineer – AI Security

• Own the end-to-end production of Physical Security AI models
• Lead cross functional teams to strategize, plan, and execute programs
• Drive accountability for assigned initiatives and limit risk exposure
• Collaborate with members of the Business Execution team
• Own the full model lifecycle for Physical Security AI capabilities
• Partner with Risk, Compliance, Legal, Privacy, and Technology

Lead Business Execution Consultant – Physical Security AI Model Owner

• Implement security requirements across the medical device development lifecycle by partnering with cross-functional teams and applying best practices from design through deployment
• Conduct threat modeling and vulnerability assessments to identify, prioritize, and help mitigate security risks throughout the product lifecycle
• Support the design and delivery of secure medical devices through implementation of capabilities such as secure boot, secure communications, data protection, software update mechanisms, system integration protections, and access controls
• Apply medical device cybersecurity standards and guidance, including NIST, OWASP, and IEC 81001-5-1, and partner with development teams to strengthen security practices
• Stay current on cybersecurity trends affecting medical devices and health software, share best practices, and help advance long-term product security strategy

Senior Product Security Engineer

• Provide independent oversight and credible challenge of the Information Security program across multiple security pillars, including governance, risk assessments, controls, metrics, and issue management
• Perform risk‑based assessments of first line security practices, identifying gaps, weaknesses, thematic concerns, emerging risks, and control deficiencies
• Develop and articulate independent risk opinions supported by sound analysis, evidence, and professional judgment
• Evaluate alignment of first line activities with applicable laws, regulations, regulatory guidance, industry standards (e.g., NIST 800-53, FFIEC, PCI, NIST CSF 2.0, etc), and internal policies
• Monitor key risk indicators, security metrics, assessment results, and issue trends to identify systemic risks or areas requiring escalation
• Escalate material risks, control weaknesses, or ineffective risk management practices through appropriate governance and reporting channels
• Act as a subject matter expert on information security risk, providing insights and guidance to stakeholders while maintaining 2LoD independence
• Build and maintain strong, professional relationships with first line stakeholders while confidently challenging assumptions, conclusions, and risk positions when necessary
• Contribute to executive‑level risk reporting by clearly summarizing risk posture, trends, and areas of concern in a concise and defensible manner
• Stay current on evolving cybersecurity threats, regulatory expectations, and industry best practices to continuously strengthen oversight effectiveness

Information Security Risk Oversight Professional

• Perform information security risk assessments on third-party vendors (new and existing)
• Review and analyze vendor security questionnaires, control responses, and supporting documentation
• Identify security gaps, control deficiencies, and non-compliance issues
• Document and track risk findings and remediation efforts through resolution
• Evaluate vendor remediation plans and compensating controls
• Partner with business stakeholders and third parties to explain risks and recommend mitigation strategies
• Support contract review and redlining with a focus on information security requirements
• Conduct continuous monitoring of vendor security posture
• Review and assess third-party security incidents and perform post-event analysis
• Contribute to monthly and quarterly reporting, metrics, and trend analysis
• Support audit activities, control testing, and quality assurance efforts
• Collaborate across information security, risk, and compliance teams

Information Security Third-Party Risk Analyst

• Work closely with client executives and management teams to understand their businesses and assist in identifying and managing financial and operational risks within their business systems to ensure technology risks are managed:
• Develop in-depth knowledge of clients’ businesses and industries by having direct client interaction while working on multiple aspects of an engagement
• Think independently and strategically about your clients’ business, systems and risks providing recommendations for business and process improvements based upon knowledge gained relative to the client’s operations, processes and business objectives
• Provide strategic business assurance to clients by assisting in the implementation of new processes and controls that address key risks
• Assess, manage and optimize information technology risk across a wide range of areas, including cybersecurity, IT strategy and governance, IT regulatory and compliance requirements, and business continuity
• Review clients' processes and controls against industry frameworks, identifying gaps in design and execution, and communicating issues and recommendations to clients
• Assist in the development of audit programs and the execution of internal audits and IT control assessments in the areas of:
• IT strategy and governance
• IT operations, business continuity and disaster recovery
• Cybersecurity
• Third party risk
• ITGC and application controls
• SOC reporting
• Regulatory and compliance requirements
• Assist in drafting comprehensive executive summaries and final reports for delivery to the client, documenting and reviewing engagement work papers in accordance with industry-accepted internal audit methodologies
• Act as a valued business advisor, build relationships and communicate effectively with the client to provide superior client service
• Facilitate professional and effective presentations to internal and external audiences
• Continue to develop your knowledge and experience working with a variety of technology environments, platforms, applications and tools/utilities
• Demonstrate the desire to continually grow, learn and develop skills and knowledge through external and internal education, training and cross-training opportunities to maximize personal contribution to the organizational goals and ongoing career development
• Utilize your entrepreneurial skills to network and build strong relationships internally and externally with clients
• Support the growth and development of team members through the Baker Tilly Care and Teach philosophy, helping associates meet their professional goals
• Enjoy friendships, social activities and team outings that encourage a work-life balance

Senior IT Audit, Cybersecurity & Risk Advisory

• Support security control assessment activities
• Gather and organize assessment evidence
• Document security control implementation
• Conduct security testing and evaluations
• Assist with vulnerability scans and analysis
• Create of assessment reports and briefings
• Maintain assessment documentation and tracking sheets
• Lead security control interviews
• Prepare assessment deliverables
• Applying NIST security controls and frameworks
• Support continuous monitoring activities
• Assist with security documentation review
• Contribute to Plans of Action and Milestones (POA&Ms) development
• Participate in team meetings and technical discussions

Security Control Assessor

• Define and mature enterprise information security strategy, policies, and standards
• Own and evolve Shaw’s Information Security Program and SOC 2 Type II compliance
• Serve as primary security representative for clients, auditors, and executives
• Lead risk identification, mitigation, and enterprise security roadmap
• Oversee access controls, third-party risk, and security readiness exercises
• Present security posture, risks, and compliance status to leadership and external stakeholders
• Oversee 24/7 SOC operations and incident response lifecycle
• Manage threat detection, monitoring, vulnerability management, and remediation
• Lead response to authentication threats, phishing, and unauthorized access events
• Maintain and enhance security tooling across the stack
• Drive network, cloud, and infrastructure hardening initiatives
• Lead enterprise AI security strategy and rollout
• Design and enforce AI governance framework
• Ensure reliability, patching, identity governance, and cloud operations
• Maintain enterprise risk register and mitigation tracking
• Lead client/vendor security assessments and regulatory readiness
• Monitor regulatory developments
• Lead, mentor, and develop InfoSec and Service Ops teams
• Engage with executive leadership on security and AI risk strategy
• Partner with DevOps, Cloud, and Implementation teams

Information Security Officer

• Define and mature enterprise information security strategy, policies, and standards
• Own and evolve Shaw’s Information Security Program and SOC 2 Type II compliance
• Serve as primary security representative for clients, auditors, and executives
• Lead risk identification, mitigation, and enterprise security roadmap
• Oversee access controls, third-party risk, and security readiness exercises (DR, incident tabletop)
• Present security posture, risks, and compliance status to leadership and external stakeholders
• Hold named accountability for security representations in client agreements
• Oversee 24/7 SOC operations (via partner) and incident response lifecycle
• Manage threat detection, monitoring, vulnerability management, and remediation
• Lead response to authentication threats, phishing, and unauthorized access events
• Maintain and enhance security tooling across the stack
• Drive network, cloud, and infrastructure hardening initiatives
• Lead enterprise AI security strategy and rollout
• Represent AI security posture to clients, auditors, and leadership
• Provide leadership oversight to Service Operations (infrastructure, endpoints, support)

• Partner with business and technology teams to evaluate moderately complex problems and identify scalable, cost-effective application security and system solutions
• Drive the planning, coordination, and execution of application security programs, including AppSec scanning practices and related assurance activities
• Lead cross-functional project management efforts, including scope definition, timelines, resource coordination, and dependency tracking
• Facilitate communication and alignment between application teams, security teams, and business stakeholders to ensure effective delivery and adoption of security practices
• Translate technical security findings into business-relevant insights and actionable recommendations
• Support organizational change management efforts, including stakeholder engagement, training, and communication strategies to improve security awareness and adoption
• Monitor and report on program performance, including testing coverage, risk posture, and remediation progress
• Contribute to the development and continuous improvement of security processes, workflows, and service delivery models
• Provide guidance and training to user groups; gather feedback to inform improvements in tools, processes, and user experience
• Exercise independent judgment in developing program plans, budgets, and prioritization strategies
• Leverage approved AI tools to support research, analysis, documentation, and decision-making while adhering to data privacy and security standards
• Apply sound judgment in interpreting AI-generated outputs and aligning them to business and security objectives

See all jobs on JobTailor

Information Security Manager

Business Information Security Officer

Principal Security Risk Analyst

Sales Executive – Identity Security Business Development

Cybersecurity Professional

Senior Architect – Cyber Security

Network Security Engineer

Systems & Security Engineer

Facility Security Officer

Senior Info Security Engineer – Netskope ZTNA Platform

Principal Engineer – AI Security

Lead Business Execution Consultant – Physical Security AI Model Owner

Senior Product Security Engineer

Information Security Risk Oversight Professional

Information Security Third-Party Risk Analyst

Senior IT Audit, Cybersecurity & Risk Advisory

Security Control Assessor

Information Security Officer

Information Security Officer

Senior Technology Business Systems Consultant – Application Security