Are you looking to make an impactful difference in your work, yourself, and your community? Why settle for just a job when you can land a career? At ICW Group, we are hiring team members who are ready to use their skills, curiosity, and drive to be part of our journey as we strive to transform the insurance carrier space. We're proud to be in business for over 50 years, and its change agents like yourself that will help us continue to deliver our mission to create the best insurance experience possible.
Headquartered in San Diego with regional offices located throughout the United States, ICW Group has been named for the twelfth consecutive year in a row and for the 20th time overall as a Top 50 performing P&C organization offering the stability of a large, profitable and growing company combined with a focus on all things people. It's our team members who make us an employer of choice and the vibrant company we are today. We strive to make both our internal and external communities better everyday! Learn more about why you want to be here!
PURPOSE OF THE JOB
The Security Architect II is a senior individual contributor within the Enterprise Architecture team who develops and influences enterprise security architecture direction and establishes frameworks and reusable guidance within assigned areas of responsibility to support the operationalization of security across the enterprise. The role translates business objectives, risk priorities, and regulatory obligations into practical security capabilities, standards, reference architectures, and implementation patterns. Working across business, technology, security, infrastructure, data, and delivery teams, the Security Architect II promotes consistent risk-based decisions and ensures security is designed into enterprise platforms, cloud environments, applications, integrations, data solutions, and emerging AI capabilities.
ESSENTIAL DUTIES AND RESPONSIBILITIES
Develops and influences enterprise security architecture and strategic direction.
· Develops, maintains, and communicates enterprise security architecture frameworks, principles, target-state architectures, reference architectures, roadmaps, and reusable security patterns.
· Maps business goals, risk appetite, regulatory obligations, and enterprise strategy to security capabilities and technical implementation direction.
· Partners with enterprise, solution, cloud, data, integration, infrastructure, and AI architects to embed security into technology strategies and solution designs.
· Defines current-state and target-state security capabilities, identifies gaps and dependencies, and recommends sequenced initiatives to improve enterprise security maturity.
· Provides architecture guidance for identity and access management, zero trust, network and cloud security, application security, data protection, cryptography, secrets management, logging and monitoring, resilience, vulnerability management, and third-party technology risk.
· Creates decision records and clearly documents security trade-offs, assumptions, risks, compensating controls, and required follow-up actions.
Defines and maintains security standards, guidelines, and procedures.
· Develops and maintains enterprise security standards, guidelines, control patterns, and procedures within assigned areas of responsibility and contributes to broader enterprise security direction, ensuring the resulting guidance is actionable, internally consistent, and aligned with enterprise policy.
· Uses recognized frameworks and principles such as NIST Cybersecurity Framework, NIST SP 800-53, NIST Zero Trust Architecture, ISO/IEC 27001 and 27002, CIS Controls, and secure-by-design practices as appropriate to the organization.
· Develops and maintains minimum security requirements and approved patterns within assigned areas of responsibility for AWS services, cloud accounts, networking, identity, encryption, key management, secrets, workload protection,…