Senior Architect, Information Security - Risk Management/SAFE

Molina Healthcare•Long Beach, CA

About The Position

The Senior Architect, Information Security serves as a senior level security risk management leader responsible for identifying, assessing, monitoring, and improving the management of information security risks across the Molina enterprise. The role leverages the SAFE security platform to provide ongoing visibility into first and third party risk posture, remediation progress, and enterprise risk trends. This position partners closely with technology, business, vendor management, legal, and the SAFE platform team to ensure security risk management capabilities, processes, and outcomes continuously evolve to meet organizational needs.

Requirements

5+ years of experience in information security risk management, security governance, or security assessment roles.
Strong understanding of enterprise security risk concepts and risk treatment strategies.
Experience working in regulated environments.
Ability to communicate technical risk issues in clear business terms.
Strong written and verbal communication skills.

Nice To Haves

Professional security or risk certifications (e.g., CISSP, CISM).
Experience in healthcare or other highly regulated industries.
Experience supporting third party risk management and remediation tracking.

Responsibilities

Identify, assess, and document information security risks across enterprise systems, applications, data, and third party relationships.
Use the SAFE security risk management platform to monitor first and third party security risks, remediation activities, and overall enterprise risk posture.
Work with the SAFE platform team to support delivery of risk management focused enhancements, process improvements, and platform capabilities that strengthen enterprise risk visibility and effectiveness.
Coordinate SAFE related security requirements within third party contracts in partnership with procurement, legal, and vendor management teams.
Ensure third party security assessments, telemetry, and risk data are integrated into SAFE to improve risk detection, monitoring, and reporting.
Review projects, system changes, and vendor engagements to evaluate security risk exposure and adequacy of proposed safeguards.
Recommend and track risk treatment options, including mitigation, acceptance, transfer, or avoidance.
Provide clear, risk based guidance to stakeholders and leadership.
Support internal and external audits, assessments, and regulatory inquiries through defensible risk narratives and reporting.