OneMain Financial Jobs

Lead Information Security Architect

The Lead Information Security Architect reviews information security architecture, while ensuring consistent and effective information security administration procedures and processes. Working under limited supervision, this job oversees security configuration and the installation of various servers, along with helping to design security models and craft the overall information technology (IT) vision within the organization.

Key Responsibilities and Duties

• Reviews the design and development of security models, along with establishing the procedures and guidelines for hardware, software and network security that support information security policies.

• Overseeing security awareness programs; educating and communicating to staff about information security polices, procedures, and practices.

• Crafts the organizational technology vision and information security principles and standards to ensure that the information security needs of the business are met.

• Reviews and implements the design for security solutions and champions them through the architectural portions of the software development life cycle process.

• Advises the selection decisions of security tools for use by various security teams and in the architecture review as the voice of security in the governance of the software development process as it relates to architectural elements.

• Serves as an internal information security consultant on the standards, complex issues and best practices to the organization.

• Coaches and delegates work to lower-level professionals to ensure high-quality and timely completion of projects while managing select projects and processes.

Minimum Qualifications

• 5 years of experience leading security architecture initiatives for an enterprise organization

• Prior experience designing, implementing, and managing security architecture standards to ensure compliance and to reduce risk to the bank

Preferred Qualifications

• 7+ years of experience leading security architecture for a mid-large sized financial institution

• Advanced knowledge and understanding of cloud security concepts - Azure, AWS, GCP, etc.

• One or more of the following certifications - CISSP, CCSP, TOGAF

Educational Requirements

• University (Degree) Preferred

Physical Requirements

• Physical Requirements: Sedentary Work

Career Level

8IC

Additional Responsibilities:

• Own and lead security architecture as a 1st Line of Defense function, accountable for proactive risk identification, control design, and secure technology enablement

• Define, implement, and maintain enterprise security architecture across applications, infrastructure, cloud, data, identity, and third‑party integrations

• Establish and enforce security architecture standards, patterns, and guardrails to ensure compliance with FFIEC, GLBA, SOX, and internal risk appetite

• Partner directly with engineering, product, and infrastructure teams to embed security-by-design and DevSecOps practices throughout the SDLC

• Serve as the authoritative approver for security architecture reviews, threat models, and risk assessments for new initiatives and material changes

• Drive adoption of Zero Trust principles, IAM, network segmentation, encryption, key management, and data protection architectures

• Translate regulatory, risk, and business requirements into pragmatic, scalable security solutions that enable business outcomes

• Provide architectural oversight for cloud migrations, fintech integrations, and vendor solutions, ensuring secure onboarding and ongoing risk management

• Actively support incident response, vulnerability prioritization, and security event remediation by addressing systemic and architectural weaknesses

• Mentor and technically lead security engineers, acting as a force multiplier for security maturity across the organization

• Collaborate with 2nd Line (Risk/GRC) and Audit teams while retaining ownership for control implementation and effectiveness

Posting end date - 4/30/26

Job Seeker Notice

EverBank, N.A. is a nationwide specialty bank providing high-value products and services to consumer and commercial clients nationwide. As a pioneer in online banking, we offer convenient digital access for clients 24/7, in addition to phone banking services and a network of financial centers.

The Company's commitment is to deliver to our clients high-performing, high-yield solutions backed by exceptional service, always giving them the advantage they expect, to make the most of their money.

VEVRAA Federal Contractor

Member FDIC

Notice to Job Seekers (https://everbank.com/about/careers/notice-to-job-seekers)

Pay Range $121,600 - $164,600

EverBank, N.A. is an equal opportunity (EEO) employer, dedicated to maintaining a work environment free of bias, harassment, discrimination and retaliation. As an EEO employer, EverBank expressly prohibits discrimination, harassment and retaliation based on protected characteristics such as race, creed, ethnicity, color, age, religion, sex, sex stereotype, pregnancy, sexual orientation, gender, gender identity, gender expression, transgender status, marital status, national origin, ancestry, physical or mental disability, genetic history and information, or military or veteran status. Providing a safe, inclusive environment is a priority at EverBank and, consistent with that mission, EverBank considers all qualified applicants for employment regardless of protected status.

We will not discharge or in any other manner discriminate against associates or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another associate or applicant. However, associates who have access to the compensation information of other associates or applicants as a part of their essential job functions cannot disclose the pay of other associates or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by us, or (c) consistent with our legal duty to furnish information.