Cyber Security Associate Advisor - HIH - Evernorth

The Cyber Security Associate Advisor plays a critical role in fortifying the organization's cybersecurity infrastructure by ensuring that all security technologies are seamlessly integrated and functioning cohesively. This position bridges the gap between security engineering, IT operations, and business requirements, enabling a unified and proactive defense against evolving cyber threats.

Responsibilities

• The Associate Advisor will be responsible for designing, developing, and collaborating with enterprise identity services regarding business unit and product integrations with enterprise identity platforms (e.g., Azure AD/Entra ID, Active Directory, Identity Governance, Okta, MFA, SSO, OAuth, SAML).

• Support the onboarding of business units and applications into enterprise IAM services using standardized patterns and providing security consultation/guidance and engineering to product owners, customers, system owners, and developers, throughout the integration processes.

• Ensure integrations comply with enterprise security policies, identity standards, regulatory requirements, and zero-trust principles. Conduct assessments of application identity requirements, risks, and integration readiness. Collaborate with architects to refine identity patterns, baselines, and technical standards.

• This role requires a strong technical foundation in cybersecurity and identity and access management practices, as well as the ability to collaborate across departments to understand operational needs and translate them into secure, scalable solutions. The ideal candidate is detail-oriented, innovative, and capable of managing complex integration projects while maintaining a high level of security and performance.

Qualifications:

• Education & Experience

  • Bachelor’s degree in Computer Science, Information Security, or related field.

  • 5-11+ years of experience in cybersecurity, IT systems integration, or related roles.

• Technical Skills

  • Strong Knowledge of Identity lifecycle and provisioning workflows, OAuth 2.0, OpenID Connect, and SAML integrations, Okta, Azure Active Directory / Entra ID, MFA and Conditional Access policies, Directory services (AD, LDAP)

  • Knowledge of cybersecurity common frameworks NIST, HITRUST, ISO 27001, SOC2 and fundamentals of cybersecurity program management.

  • Knowledge of Risk Management frameworks and principals, and GRC tools used to assess, track, and mitigate risk.

  • Familiarity with cloud environments (AWS, Azure, GCP) and their security services.

• Certifications (Preferred)

  • CISSP, Security+, other industry related certifications preferred

About Evernorth Health Services