Information Security Senior Advisor

Location & Work Arrangement

In-office presence is required 1–2 days per week to foster collaboration and connectivity while allowing flexibility for remote work. Alternate locations may be considered if candidates reside within a reasonable commuting distance. Candidates not within a reasonable commuting distance to the posting location(s) will not be considered for employment unless an accommodation is granted as required by law.

The Information Security Senior Advisor is responsible for the selection and delivery of strategic network security, access control, secure transaction/messaging solutions, business continuity, risk management, crisis management, operational and technology‑AI resilience, and third‑party risk management (TPRM) controls and solutions. The role develops, recommends, and implements enterprise information security, vendor resilience, and business resilience programs in compliance with company policies, regulatory requirements, industry standards, and best practices.

• Lead development and execution of risk assessment methodologies tailored to business, regulatory, and technical environments.
• Define system architecture, software design, and requirements for security and risk management products; develop strategies to discover, evaluate, and respond to new networking threats.
• Develop security, crisis response, and TPRM incident response plans and strategies.
• Provide trouble resolution and act as technical and TPRM escalation point for complex problems.
• Create presentations to secure IT management approval for significant resilience programs and major security system changes.
• Support operational, business, and vendor resilience strategy and direction.
• Serve on project teams as a technical subject‑matter expert for business partners, stakeholders, vendors, and developers.
• Design and engineer comprehensive access management and network security solutions, including resilience tools for planning and execution.
• Collaborate with architecture to update technology direction and strategy.
• Produce reports to support strategic direction for management.
• Act as technical lead for mergers and acquisitions.
• Communicate effectively in writing and verbally with associates, team members, stakeholders, regulators, customers, and vendors.
• Provide top‑tier support for at least five of the following knowledge areas:
  • Access Control
  • Application Security
  • Business Continuity and Disaster Recovery Planning
  • Cryptography
  • Information Security and Risk Management
  • Legal, Regulations
  • Compliance and Investigations
  • Operations Security
  • Physical (Environmental) Security
  • Security Architecture and Design
  • Telecommunications and Network Security
  • Vendor Resilience
  • Technology Resilience

Requires a BS/BA in Information Technology, Business Administration, or a related field and a minimum of eight years of experience in business continuity management, TPRM, systems administration, security, access management, network security technologies, telecommunications, systems development, and management. Experience across multiple technical and business disciplines or an equivalent combination of education and experience is required.

• Certifications such as CBCP, MBCP, CISSP, or other advanced technical security certifications (e.g., Information Systems Security Architecture Professional, Information Security Engineering Professional, Certification and Accreditation Professional).
• Experience planning, designing, building, implementing, or maturing third‑party risk management programs, business continuity programs, global business resilience programs, or highly complex systems.
• Experience in the healthcare sector is preferred.

Elevance Health is an Equal Employment Opportunity employer. Qualified applicants will receive consideration for employment without regard to age, citizenship status, color, creed, disability, ethnicity, gender (including gender identity and expression), marital status, national origin, race, religion, sex, sexual orientation, veteran status, or any other status protected by applicable federal, state, or local laws. Applicants who require accommodation to participate in the job application process may contact us for assistance.