|
QUALIFICATIONS/REQUIREMENTS:
- Bachelor's degree specializing in Computer Science, Management Information Systems, or related field, or equivalent combination of education and related experience required. Master’s Degree preferred.
- CISSP Certification preferred; CISM, CRISC, CCNA, or CGEIT certifications strongly preferred.
- Minimum 5 years of progressive experience in IT architecture with demonstrated GRC integration.
- Deep understanding of governance frameworks (e.g., COBIT, NIST CSF, ISO 27001) and regulatory environments (e.g., SOX, GLBA, HIPAA).
- Solid understanding of security protocols, cryptography, authentication, authorization and security
- Ability to understand highly complex environments, concepts, or problems from the business perspective to effectively guide the development of requirements and solutions.
- Experience implementing multi-factor authentication, single sign-on, identity management or related technologies
- Experience with multiple system delivery methods and technologies, such as AWS, Azure, VMWare, Windows Server, Linux, Palo Alto, and Network technologies
- Effective verbal and written communication skills.
- Strong business acumen with demonstrated understanding of technology.
- Exceptional problem-solving skills.
- Regular and reliable attendance and punctuality is an essential function of this position.
|
DUTIES/RESPONSIBILITIES:
- Designs and maintains security architecture by evaluating technologies and developing requirements for LANs, WANs, VPNs, firewalls, Network Security, and PKIs, ensuring alignment with regulatory and internal GRC standards
- Translate business objectives and enterprise risk strategies into actionable security processes and controls, integrating security principles into architecture and operations.
- Implement and monitor security systems and work with the business to assure they meet compliance requirements (e.g., HIPAA, GLBA, NAIC Model Laws).
- Works with teams to develop automation and secure development lifecycle practices that embed GRC controls into CI/CD pipelines and application design, along with other business processes.
- Conducts regular reviews of system security measures and recommends enhancements to address emerging threats and evolving compliance mandates.
- Key resource for risk assessments and control evaluations to identify vulnerabilities, assess impact, and ensure mitigation strategies are documented and tracked.
- Contributes to the development and enforcement of IT security policies, standards, and procedures, ensuring they reflect current regulatory requirements and industry best practices.
- Supports internal and external audits by providing architectural documentation, control evidence, and remediation plans related to security and compliance.
|
|
Kansas City Life Insurance Company
|
ATTN: Human Resources Department
3520 Broadway
P.O. Box 219139
Kansas City, MO 64121-9139
EOE/MFVH
e-mail:[email protected]
|
|
|
|
|
Print this job description
|
|
Close this job description
|