Managing Director, Enterprise Security Architecture & Engineering- Evernorth

* Willing to consider Remote/Work From Home for the right candidate.

Role Summary: The Managing Director of Security Architecture & Engineering is a senior cybersecurity and technology leader responsible for architecting secure enterprise technology and delivering the cybersecurity platforms and services that protect The Cigna Group at speed and scale.

This role ensures that security is embedded by design across cloud, application, infrastructure, and emerging technology environments- while leading the engineering and delivery of cybersecurity platforms that enable protection, detection, response, identity, cloud security, and cyber operations at enterprise scale.

Partners with CIO, CISO, and enterprise technology leaders to align security architecture, secure engineering practices, and cybersecurity platform investments with business priorities, regulatory requirements, and the evolving threat landscape.  Fundamentally, this role is accountable both for influencing how the enterprise builds technology securely and for delivering the security platforms and services that enable Cybersecurity to protect the company at speed and scale. 

RESPONSIBILITIES:

Security Architecture & Engineering Leadership

• Lead Security Architecture & Engineering as an enterprise capability, that advances secure-by-design technology practices and delivers cybersecurity engineering capabilities that protect the enterprise.

• Establish and govern security architecture standards, reference architectures, and design patterns across applications, cloud, infrastructure, and platform services.

• Ensure security is embedded early and consistently across the technology delivery lifecycle through secure-by-design and DevSecOps practices.

• Drive engineering outcomes that are scalable, resilient, automated, and aligned to modern cloud-native and platform-based architectures.

Cybersecurity Platform Engineering & Delivery 

• Own the strategy, architecture, roadmap, modernization, and delivery of core cybersecurity platforms and services that enable enterprise security operations, reduce complexity, and improve risk outcomes. 

• Lead engineering teams responsible for designing, implementing, integrating, automating, and lifecycle-managing security technologies, reusable services, APIs, and engineering capabilities across identity, endpoint, cloud, application, network, data, detection, and response domains. 

• Establish platform engineering practices and metrics that improve reliability, scalability, performance, resiliency, adoption, operational efficiency, and user experience across the cybersecurity technology portfolio. 

Cloud & Platform Security

• Define and advance secure cloud adoption strategies across multi-cloud and hybrid environments (e.g., AWS, Azure).
• Partner with cloud, infrastructure, and application leaders to ensure secure configuration, architecture, and operation of platforms.
• Lead the development of guardrails and controls that enable speed while enforcing security and compliance requirements.
• Promote infrastructure-as-code, policy-as-code, automated security controls across environments, and reusable cloud-native security patterns across environments. 

AI, Emerging Technology & Innovation

• Establish security architecture and controls for AI/GenAI solutions, including model governance, data protection, and responsible AI practices.

• Partner with enterprise AI and data teams to enable secure adoption of advanced analytics, machine learning, and automation capabilities.

• Evaluate emerging technologies and integrate them into security and engineering strategies in a way that balances innovation with risk management.

• Drive AI-enabled security capabilities, automation, and engineering solutions that enhance detection, response, security operations, decision-making, and cyber defense outcomes.

Enterprise Engagement & Risk Alignment

• Act as a trusted advisor to senior technology and business leaders on security architecture, cloud risk, and investment priorities.

• Ensure alignment of architecture and engineering decisions with enterprise cybersecurity frameworks, standards, and regulatory requirements.

• Partner with risk, compliance, and audit teams to ensure appropriate controls and governance are embedded across platforms.

• Provide clear, executive-level communication on security posture, architecture direction, and key risks.

Strategy, Transformation & Talent

• Develop and execute a multi-year cybersecurity platform strategy that simplifies the tooling portfolio, improves engineering excellence, advances automation, and aligns investment planning and lifecycle management to measurable business outcomes.

• Build and mentor leadership talent within the organization, ensuring succession depth and strong engagement.

• Foster a culture that balances strong risk management with business enablement and innovation.

QUALIFICATIONS:

• Bachelor’s degree required; Master’s degree or MBA preferred.

• 12+ years of progressive experience in cybersecurity, cloud engineering, or technology leadership roles.

• Proven experience leading enterprise-level security architecture, secure engineering, and cybersecurity platform delivery functions within complex, regulated environments.

• Deep expertise across: Cloud platforms (AWS, Azure, hybrid architectures); Security architecture frameworks (NIST, ISO, CIS, etc.); Application, infrastructure, identity, and data security domains.

• Demonstrated experience advancing modern engineering practices (cloud-native, DevSecOps, automation, API-driven architectures).

• Familiarity with AI/ML security considerations, data protection, and emerging technology risk management.

• Strong executive presence with the ability to influence senior leaders and drive alignment across a matrixed organization.

• Experience operating in globally distributed environments with internal and external partners.

• Relevant certifications (e.g., CISSP, CISM, CCSP) preferred.

If you will be working at home occasionally or permanently, the internet connection must be obtained through a cable broadband or fiber optic internet service provider with speeds of at least 10Mbps download/5Mbps upload.

For this position, we anticipate offering an annual salary of 220,100 - 366,800 USD / yearly, depending on relevant factors, including experience and geographic location.

This role is also anticipated to be eligible to participate in an annual bonus and long term incentive plan.

At The Cigna Group, you’ll enjoy a comprehensive range of benefits, with a focus on supporting your whole health. Starting on day one of your employment, you’ll be offered several health-related benefits including medical, vision, dental, and well-being and behavioral health programs. We also offer 401(k), company paid life insurance, tuition reimbursement, a minimum of 18 days of paid time off per year, paid holidays, and leaves of absence. For more details on our employee benefits programs, click here.

About The Cigna Group

Doing something meaningful starts with a simple decision, a commitment to changing lives. At The Cigna Group, we’re dedicated to improving the health and vitality of those we serve. Through our divisions Cigna Healthcare and Evernorth Health Services, we are committed to enhancing the lives of our clients, customers and patients. Join us in driving growth and improving lives.

Qualified applicants will be considered without regard to race, color, age, disability, sex, childbirth (including pregnancy) or related medical conditions including but not limited to lactation, sexual orientation, gender identity or expression, veteran or military status, religion, national origin, ancestry, marital or familial status, genetic information, status with regard to public assistance, citizenship status or any other characteristic protected by applicable equal employment opportunity laws.

If you need a reasonable accommodation to complete the online application process, please email seeyourself@thecignagroup.com for assistance.  Please note that this email inbox is dedicated to accommodation requests only and cannot provide application updates or accept resumes.

The Cigna Group has a tobacco-free policy and reserves the right not to hire tobacco/nicotine users in states where that is legally permissible. Candidates in such states who use tobacco/nicotine will not be considered for employment unless they enter a qualifying smoking cessation program prior to the start of their employment. These states include: Alabama, Alaska, Arizona, Arkansas, Delaware, Florida, Georgia, Hawaii, Idaho, Iowa, Kansas, Maryland, Massachusetts, Michigan, Nebraska, Ohio, Pennsylvania, Texas, Utah, Vermont, and Washington State.

Qualified applicants with criminal histories will be considered for employment in a manner consistent with all federal, state and local ordinances.