Information Protection Director
About the position
The Information Protection Director at Cigna will lead the development and maintenance of unified intake systems and remediation management processes within the PEACE Shared Services team. This strategic role focuses on engineering solutions that enhance operational efficiency and security, aligning with Cigna's security standards and best practices. The director will collaborate with cross-functional teams to deliver scalable and secure solutions that support Cigna's Digital First strategy and overall security goals.
Responsibilities
Engineer and maintain intake systems on chosen platforms, ensuring scalability and reliability.
,
Manage operational triage, routing requests to appropriate teams for timely responses.
,
Develop, deploy, and maintain reporting mechanisms for non-production environments.
,
Oversee operations focused on reducing non-production security vulnerabilities.
,
Design, test, deploy, and maintain solutions that enhance team bandwidth and efficiency.
,
Embed security and compliance into workflows, identifying automation opportunities.
,
Provide continuous input to leaders within CISO and Digital Product teams to align on security goals.
,
Spearhead initiatives to improve the overall security posture for Cigna/Evernorth.
,
Support business line mergers, acquisitions, and divestiture activities to ensure smooth transitions of security processes.
Requirements
Minimum 10+ years of Information Security, Cybersecurity, or related risk management experience.
,
Hands-on expertise in implementing and managing security frameworks such as NIST, ISO/IEC 27001/27002, and PCI-DSS.
,
Experience in developing and maintaining intake systems and reporting mechanisms for enterprise environments.
,
Ability to translate technical requirements into business solutions and collaborate across teams.
,
Strong organizational skills to manage multiple priorities and balance short-term tasks with long-term initiatives.
,
Familiarity with Governance, Risk, and Compliance tools like ServiceNow, Archer, and Salesforce.
Nice-to-haves
Ability to develop tools, training, and processes to educate teams on security standards.
,
Experience with cloud platforms, automation tools, and application security practices.
,
Strong relationship-building skills to work closely with security, technology, and business teams.
,
Experience with Agile and DevSecOps practices, focusing on embedding security within the development lifecycle.
,
Proactive and adaptable in a dynamic environment, seeking to improve processes.
Benefits
Medical, vision, and dental insurance coverage.
,
401(k) with company match.
,
Company paid life insurance.
,
Tuition reimbursement.
,
Minimum of 18 days of paid time off per year.
,
Paid holidays.
Apply Now
The Information Protection Director at Cigna will lead the development and maintenance of unified intake systems and remediation management processes within the PEACE Shared Services team. This strategic role focuses on engineering solutions that enhance operational efficiency and security, aligning with Cigna's security standards and best practices. The director will collaborate with cross-functional teams to deliver scalable and secure solutions that support Cigna's Digital First strategy and overall security goals.
Responsibilities
Engineer and maintain intake systems on chosen platforms, ensuring scalability and reliability.
,
Manage operational triage, routing requests to appropriate teams for timely responses.
,
Develop, deploy, and maintain reporting mechanisms for non-production environments.
,
Oversee operations focused on reducing non-production security vulnerabilities.
,
Design, test, deploy, and maintain solutions that enhance team bandwidth and efficiency.
,
Embed security and compliance into workflows, identifying automation opportunities.
,
Provide continuous input to leaders within CISO and Digital Product teams to align on security goals.
,
Spearhead initiatives to improve the overall security posture for Cigna/Evernorth.
,
Support business line mergers, acquisitions, and divestiture activities to ensure smooth transitions of security processes.
Requirements
Minimum 10+ years of Information Security, Cybersecurity, or related risk management experience.
,
Hands-on expertise in implementing and managing security frameworks such as NIST, ISO/IEC 27001/27002, and PCI-DSS.
,
Experience in developing and maintaining intake systems and reporting mechanisms for enterprise environments.
,
Ability to translate technical requirements into business solutions and collaborate across teams.
,
Strong organizational skills to manage multiple priorities and balance short-term tasks with long-term initiatives.
,
Familiarity with Governance, Risk, and Compliance tools like ServiceNow, Archer, and Salesforce.
Nice-to-haves
Ability to develop tools, training, and processes to educate teams on security standards.
,
Experience with cloud platforms, automation tools, and application security practices.
,
Strong relationship-building skills to work closely with security, technology, and business teams.
,
Experience with Agile and DevSecOps practices, focusing on embedding security within the development lifecycle.
,
Proactive and adaptable in a dynamic environment, seeking to improve processes.
Benefits
Medical, vision, and dental insurance coverage.
,
401(k) with company match.
,
Company paid life insurance.
,
Tuition reimbursement.
,
Minimum of 18 days of paid time off per year.
,
Paid holidays.
Apply Now