Info Security Executive Advisor - CareBridge BISO

Anticipated End Date:

Position Title:

Info Security Executive Advisor – Care Bridge BISO

This position is not eligible for current or future visa sponsorship.

Location:

In‑office 1–2 days per week; hybrid model. Remote work may be considered for candidates within commuting distance of the office. Candidates outside the reasonable commuting zone will not be considered unless required by law accommodations are granted.

The Info Security Executive Advisor is a dedicated security and risk management leader embedded within a major business unit of Elevance Health. They connect executive business leaders, technology professionals, compliance teams, and the Global Information Security organization.

• Lead Information Security and Risk Management for the assigned Business Unit.
• Ensure alignment with enterprise security strategy, business objectives, and regulatory obligations.
• Act as the primary business‑facing point of contact for information security and technology risk matters, coordinating enterprise security capabilities and services.
• Serve as a key leadership contact during incident response activities, ensuring effective business engagement, executive communication, and post‑incident remediation.
• Own the development and execution of the Business Unit security roadmap, aligned with enterprise priorities, strategy, and risk tolerance.
• Identify, prioritize, and recommend opportunities to reduce risk and improve security outcomes through assessments, continuous monitoring, and metrics‑driven analysis.
• Participate in enterprise planning activities including vendor and third‑party risk assessment, technology platform selection and retirement, security architecture alignment, prioritization, and integration planning.
• Serve as the Information Security and Technology Risk lead for mergers, acquisitions, and divestitures, including due diligence, integration planning, and risk remediation.
• Establish and participate in governance forums to assess, accept, mitigate, or escalate technology risk in alignment with enterprise risk management practices.
• Provide security leadership for healthcare regulatory and compliance requirements (HIPAA, HITRUST, state privacy laws), ensuring audit readiness and sustained compliance.
• Define, track, and report meaningful security and risk metrics to business and executive stakeholders.
• Act as a trusted advisor and subject‑matter expert to executive management, translating technical and cyber risk into clear business and financial impact.
• Influence business and technology leaders to adopt secure‑by‑design practices and risk‑aware decision‐making without direct operational authority.
• Mentor and develop security and risk management capabilities within the Business Unit and across enterprise teams.

Must be capable of providing top‑tier support for at least six of the following information security technology common body of knowledge skill sets:

• Access Control
• Application Security
• Business Continuity and Disaster Recovery Planning
• Cryptography
• Information Security and Risk Management
• Legal, Regulations
• Compliance and Investigations
• Operations Security
• Physical (Environmental) Security
• Security Architecture and Design
• Telecommunications and Network Security

• BS/BA in Information Technology or related field.
• Minimum 10 years of experience in systems administration and security aspects of information systems, access management, network security technologies, network communications, computer networking, telecommunications, systems development and management, hardware, software, data, and people; experience across multiple technical and business disciplines.
• Or equivalent combination of education and experience.

• Expert knowledge of industry‑accepted data processing controls and concepts as applied to security.
• Advanced security certifications preferred: CISSP, ISSA‑P, ISSE‑P, C&A or equivalents.
• Broad‑based experience designing and planning highly complex systems.

Non‑Management Exempt

Elevance Health is an Equal Employment Opportunity employer. All qualified applicants will receive consideration for employment without regard to age, citizenship status, color, creed, disability, ethnicity, genetic information, gender (including gender identity and gender expression), marital status, national origin, race, religion, sex, sexual orientation, veteran status or any other status or condition protected by applicable federal, state, or local laws.