Information Security Lead Job at SCOR Global Life in charlotte

Responsibilities: Operate as the local lead for Velogica US security and compliance activities with independent priority management Develop and improve Velogica security policies, standards, procedures, guidelines, controls, and evidence practices aligned with SDS baselines Lead and coordinate assurance activities (SOC 2 Type II, ISO 27001 alignment), audit prep, evidence collection, control owners, remediation, and monitoring Harmonize IT security and assurance practices between SDS and Velogica US via common baselines, tooling, and reporting Provide hands-on security guidance across cloud, application security, DevSecOps, vulnerability management, access controls, logging, incident response, and business continuity Engage with engineering, cloud, data, product, legal, HR, vendor management, privacy, and business stakeholders to embed security in operating processes Manage client-facing assurance activities: security questionnaires, due diligence, evidence requests, periodic reviews, assurance discussions Coordinate penetration tests, security reviews, remediation plans, and risk-based reporting Support incident response planning, investigations, lessons learned, and on-call support when needed Maintain audit-ready documentation: risk registers, issue logs, decision records, and management reporting

Key requirements: 7+ years in information security, security engineering/operations or related field; strong hands-on depth may compensate for fewer years Proven experience with SOC 2 Type II, ISO 27001/27002, NIST CSF, CIS Controls, COBIT or similar frameworks; practical control design, evidence, and remediation tracking Hands-on security across Azure and Google Cloud Platform Experience harmonizing controls and assurance to align cross-entity or cross-region programs Proven track record with client-facing security assurance activities ( questionnaires, due diligence, evidence requests, client reviews) Strong independent, senior IC with ability to manage priorities, influence without authority, and escalate as needed Experience in insurance/reinsurance or regulated financial services, SaaS, or client-assurance-heavy sectors (preferred) Bachelor in Computer Science and/or relevant field; Master’s advantageous but not required; professional certifications (CISSP/CISM/CRISC/CCSP/ISO 27001 Lead Implementer or equivalent) strongly preferred Cloud security, AI/LLM risk management, secure SDLC, DevSecOps, business continuity, incident response Hybrid work environment and willingness to work in-office 3 days/week with 2 days remote U.S. work authorization without sponsorship now or in the future Stakeholder management and cross-functional collaboration Independence and ability to manage competing priorities Risk-based decision making and clear escalation Azure GCP SOC 2 Type II