Principal, Corporate Information Security

Experteer Overview As Principal, Corporate Information Security, you act as the business information security advisor for internal lines, guiding risk-aware decisions and maturing security operations. You will bridge security teams and business units, starting with the Insurance vertical, to assess risk, review architecture, and ensure compliant, secure go-lives. You’ll translate technical risk into business impact for executives and drive governance around identity, access, and changes. This role blends CISO responsibilities with practical risk management to enable fast yet secure business delivery. Compensation / Benefits * Advise business leaders on security posture and risk for new apps/policies * Review architecture, vulnerabilities, and risk maturity before go-live * Track security exceptions, remediations, and translate technical risk for executives * Conduct governance reviews of identity/access controls aligned with policies * Support incident response and change control oversight * Foster secure, fast-moving business operations across verticals Tasks * Hands-on vulnerability management with Qualys and Veracode (required) * Experience with Black Duck (preferred) * Executive risk visualization using Looker Studio, Looker, Tableau, or Power BI (required) * GRC platform experience (e.g., Archer) and third-party risk ratings (BitSight, SecurityScorecard) * Strong enterprise risk management and security architecture knowledge * CISSP certification required; CISM or SABSA a plus * Bachelor’s degree or 8+ years of relevant security experience Key requirements * Generous PTO and 11 holidays * Fully paid parental leave and baby stipend * Multiple medical plans with mental health support * 401(k) with company match * Tuition assistance up to $5,250 * Well-being stipend and recognition rewards

risk * Foster secure, fast-moving business operations across verticals Tasks * Hands-on vulnerability management with Qualys and Veracode (required) * Experience with Black Duck (preferred) * Executive risk visualization using Looker Studio, Looker, Tableau, or Power BI (required) * GRC platform experience (e.g., Archer) and third-party risk ratings (BitSight, SecurityScorecard) * Strong enterprise risk management and security architecture knowledge * CISSP certification required; CISM or SABSA a plus * Bachelor’s degree or 8+ years of relevant security experience Key requirements * Generous PTO and 11 holidays * Fully paid parental leave and baby stipend * Multiple medical plans with mental health support * 401(k) with company match * Tuition assistance up to $5,250 * Well-being stipend and recognition rewards