Information Security Architect

Founded in 1948, CBC Companies is a privately-held company headquartered in Columbus, Ohio, with operating entities including: AmRent, Byte Software, Factual Data, DataVerify, DataVerify Flood Services, Ibbie, Innovis, and Select Business Services. CBC’s portfolio of companies includes data repositories spanning the mortgage and credit markets in addition to hundreds of proprietary integrations across the broader credit ecosystem.

At CBC we are guided by our mission to serve our customers by providing them with products and services that ultimately empower economic opportunity for Americans. Using innovative technology and driven by integrity and a culture of compliance, CBC Companies delivers high quality products and services to help our customers manage risk. 

About the Role:

As an Information Security Architect — an advanced skillset position — you will design and govern security solutions that protect the organization while enabling business execution and innovation. Reporting to the Sr. Information Security Architect and partnering with the CISO and CTSO, audit, compliance, engineering, IT infrastructure, application development, security operations teams, this role establishes secure architecture across enterprise technology, cloud environments, applications, and third-party solutions. This position serves as a technical security advisor, ensuring security is integrated into technology decisions and business initiatives.

This is a remote role based in Columbus, Ohio. Candidates must reside in the Columbus area. In-office attendance is required for key meetings and collaborations as determined by leadership.

What You’ll Do:

• Define and maintain security reference architectures, design patterns, and standards aligned with Zero Trust, Secure-by-Design, and Defense-in-Depth principles.
• Evaluate, design, and validate security solutions that balance business requirements, risk, and technical needs.
• Lead threat modeling, security assessments, and control validation for new and existing systems, applications, and platforms.
• Architect cloud and hybrid security control, including and secure cloud environments and landing zones.
• Design security solutions for business-to-business initiatives, third-party relationships, outsourced services, and vendor integrations.
• Develop and maintain security standards, policies, procedures and architecture processes.
• Partner with security engineering, IT infrastructure, application development, and security operations to embed security into platforms, applications, pipelines, and operational processes.
• Participate in architecture governance, including solution design reviews, risk assessments, and security exception management.
• Advance security architecture through automation and integration of security controls into development and technology delivery processes.
• Perform other duties as assigned.

What You’ll Need:

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field required.
• 5-8 years of cybersecurity experience, including security architecture, engineering, risk management or related disciplines.
• Strong knowledge of network and systems security including routing, switching, firewalls, Windows/Linux environments, endpoint security/EDR, and SASE technologies.
• Experience designing or securing solutions in at least one major cloud platform (AWS, Azure, and/or GCP).
• Strong knowledge of identity and access management, encryption and data protection, network segmentation, and security monitoring/SIEM.
• Working knowledge of security architecture principles and frameworks such as NIST and ISO 27001.
• Experience evaluating technical solutions, identifying security risks, and recommending appropriate security controls.
• Strong communication and consultative skills with the ability to translate technical risk into business considerations and influence technical and executive stakeholders.
• Experience with or willingness to learn AI tools and emerging technologies.

What Can Set You Apart:

• Professional security certification such as CISSP or CCSP.
• Experience in regulated financial services, consumer credit, or similarly regulated environment.
• Familiarity with PCI DSS and other applicable regulatory or compliance frameworks.
• Experience with DevSecOps,  infrastructure-as-code, automation, and CI/CD pipeline security.
• Experience mentoring engineers or junior architects.

Benefits We Offer:

CBC Companies offers comprehensive healthcare benefits to eligible employees including: medical, HSA, prescription, vision, dental. Our benefits also include life insurance, short & long-term disability, Roth and 401K with possible company match and profit sharing, an Employee Assistance Program (EAP), Time Away from Work (TAFW) and paid holidays - plus employee referral bonuses, and role-based professional development opportunities.

CBC Companies is committed to equal opportunity employment, and employment decisions are based on merit, qualifications, and abilities. Employment-related decisions are not influenced or affected by an employee’s race, color, gender, age, religion, national origin, disability, citizenship, military status, sexual orientation, genetic information, or any other category protected by federal, state or local law. The Company endorses a work environment free from discrimination and harassment.

We are committed to providing reasonable accommodations to qualified individuals with disabilities. If you require a reasonable accommodation to complete the application process or perform the essential functions of the position, please let us know.

This posting will remain open until filled.