Consulting Director, Security Engineering; Data and Network

Overview

Consulting Director, Security Engineering (Data and Network) is an individual contributor role responsible for developing CNA’s cloud-based network and data protection security strategies, conducting readiness assessments, and for the selection, development, implementation, and operation of enterprise security solutions. This role will lead the design and development of security architectures for protecting data deployed into different types of cloud applications. It also directly contributes to the overall global engineering of technologies to improve these areas, helps shape the security vision and strategy around these platforms, and serves as a lead technical point of contact for platforms that directly impact these areas.

• Develop and coordinate client security strategy and define the transition to and adoption of secure services, communicating with project stakeholders to convey requirements.
• Design and implement strategies and tactical plans to aid CNA in its move to modern solutions in a secure fashion while keeping information risk at an acceptable level.
• Based on business requirements, design and implement cloud-native security architectures and designs applying defense‑in‑depth strategies that meet requirements with minimal risk.
• Provide comprehensive expert understanding in many areas of IT and information security, describing the impact of IT and cloud security policies, standards, and architecture in business terms.
• Recommend tactical and strategic initiatives to eliminate or mitigate risks.
• Actively monitor and assess new and emerging threats posing risk to cloud computing environments.
• Provide guidance and technical leadership in the development of security standards and guidelines for technologies implemented to conform to information enterprise architecture, risk profile, and policy requirements.
• Document and advise on areas of security improvement that balance risk with business operations without diminishing efficiencies or innovation.
• In collaboration with Legal, identify current and potential legal and regulatory issues affecting information security and assess their impact.
• Participate in Customer Assessment reviews of organization security controls on behalf of customers when we store, process or transmit the customer’s data in cloud environments.
• May perform additional duties as assigned.

Typically reports to AVP or above.

• Expert level knowledge of CASB and DLP system architecture and key security concepts.
• Preferred experience with the insurance industry, its products and services.
• Strong experience with CASB/SWG platforms, especially Netskope and other proxy technologies, and experience architecting security solutions within these cloud providers.
• Expert knowledge of DLP methodologies, engineering and operations, trends, and industry‑leading cloud vendor offerings and integrations.
• Hands‑on experience configuring security services such as IAM, KMS, and certificate management security services with appropriate security certifications.
• Ability to assess risks in line with information security objectives and risk tolerance of the institution.
• Proven conceptual, analytical and evaluation skills.
• Strong interpersonal, verbal presentation and written communication skills and the ability to work independently.
• Ability to work well under pressure and to meet tight deadlines.
• Demonstrates a high level of motivation, confidence, and responsibility.
• Excellent project management skills and ability to organize and plan effectively to meet project goals.

• Bachelor’s Degree required or equivalent work experience.
• Master’s Degree in Computer Science or technical field preferred.
• Typically a minimum of ten years of IT Security experience, with recent cloud security experience.
• Deep insurance industry knowledge preferred.
• Experience working with cloud security and governance tools, cloud access security brokers (CASBs), and server virtualization technologies.
• IT Security and Cloud certifications preferred.

In District of Columbia, California, Colorado, Connecticut, Illinois, Maryland, Massachusetts, New York and Washington, the national base pay range for this job level is $97,000 to $189,000 annually. CNA offers a comprehensive and competitive benefits package.

CNA is committed to providing reasonable accommodations to qualified individuals with disabilities in the recruitment process. To request an accommodation, contact