Lead Information Security Engineer

Are you looking to make an impactful difference in your work, yourself, and your community? Why settle for just a job when you can land a career? At ICW Group, we are hiring team members who are ready to use their skills, curiosity, and drive to be part of our journey as we strive to transform the insurance carrier space. We're proud to be in business for over 50 years, and its change agents like yourself that will help us continue to deliver our mission to create the best insurance experience possible. Headquartered in San Diego with regional offices located throughout the United States, ICW Group has been named for the twelfth consecutive year in a row and for the 20th time overall as a Top 50 performing P&C organization offering the stability of a large, profitable and growing company combined with a focus on all things people. It's our team members who make us an employer of choice and the vibrant company we are today. We strive to make both our internal and external communities better everyday! Learn more about why you want to be here! PURPOSE OF THE JOB The purpose of the Information Security Engineer IV is to design secure architectures and develop cybersecurity approaches and techniques for the security of all ICW related systems and infrastructure. This position will assist with strategic initiatives for short and long-term plans to identify and reduce the attack surface across applications and systems. The Information Security Engineer IV will drive the architecture to monitor and defend ICW Group’s technology against potential threats that jeopardize the financial growth and security goals of the Company. ESSENTIAL DUTIES AND RESPONSIBILITIES Monitors, defends and drives improvements for ICW Group IT Information Security. Monitors networks and systems for security breaches, using software that detects intrusions and anomalous system behavior and develops strategies to respond to and recover from a security breach.  Identifies gaps in the technical tool/technology suite and makes recommendations Leads security incident response, including preparation, detection, analysis, containment, eradication, and recovery. Researches and implements methods to remediate network and application security vulnerabilities. Leads and participates in security architecture controls reporting, compliance audits, monthly and ad-hoc statistics and trends, and risk-focused reports including internal and 3rd party Risk Assessments. Utilizes automated tools to identify, assess, and report security concerns, with emphasis placed on effective communication to stakeholders. Takes an active lead to inform, advise, and partner with business units to help better secure operations. Leads complex security endeavors. Overseas complex security projects and issues. Develops a set of security standards to respond to and recover from a security breach. Provides support by proposing solutions, coordinating implementation, and enforcing information systems security policies, standards, and methodologies. Uses advanced technologies including Intrusion Detection & Prevention Systems (IDS/IPS), Firewalls, SIEM, Antivirus, Network Packet Analyzers, Malware analysis and forensics tools to detect intrusions, breaches in compliance, etc. Prepares and analyses system security reports by collecting, analyzing, and summarizing data and trends and makes recommendations to improve security. Maintains operational security posture for an information system or program to ensure information system security policies, standards, and procedures are established and followed. Creates and updates technical security standards for assets and software. Serves as cyber security technical subject matter expert for the organization. Provides information security expertise to system development teams throughout the life cycle process. Partners with systems engineering teams to ensure system design and implementation are consistent with company policies, requirements, and directives. Conducts risk assessments, penetration tests and diagnoses internet/extranet security, intrusion attempts, and cyber-crime response. Leads and conducts information security risk assessments including documenting processes, service level agreements and best practices. Develops the overall security design, development, testing and implementation of security solutions. Recommends compliance strategies that support customer requirements and alignment to company policy. Ensures security quality, adherence to security guidelines, profitability, and information security related metrics for self and assigned projects. Collaborates with key stakeholders on remediation strategies and follows remediation activities through closure. Partners with project management and other internal teams in determining overall security solutions. Prepares and presents comprehensive reports and recommendations to senior management and stakeholders on security-related matters. Develops and implements comprehensive security architectures encompassing all areas of IT and business technology for ICW Group using standard and advanced security measures. Works with peers, cross functional architecture leadership, and other internal groups to drive technical security risk down in targeted areas while ensuring adherence to ICW architecture standards. Coaches and educates others to increase early detection rates and decrease IT risk and security. Documents as is state of information security. Keeps current on industry trends, principles, and thought to define long range technology transitions.  Performs end to end full stack reviews of current or incoming technologies for ITSEC compliance. Ensures that proposed and existing technology architectures are aligned with organizational security goals and objectives. SUPERVISORY RESPONSIBILITIES This position has no supervisory responsibility but may mentor and train junior engineers. EDUCATION