OneMain Financial

Cybersecurity Architect

OneMain Financial$120K — $145K *
Information Technology
5 - 7 years of experience
Job Overview by Ladders

Qualifications

  • 7-10 years of cybersecurity experience, with 3+ years in a security architecture role.
  • In-depth understanding of NIST frameworks including CSF and SP 800-53.
  • Proven ability to design and review secure architectures for enterprise and cloud systems.
  • Experience translating security architecture needs into actual implementations and operational practices.
  • Solid grasp of key cybersecurity domains: IAM, network security, data protection, and application security.
  • Familiarity with LLMs, AI, GenAI solutions, and associated security challenges.
  • Experience in regulated environments with compliance framework alignment.

Responsibilities

  • Develop enterprise-wide security architectures adhering to NIST standards.
  • Design scalable, secure solutions for cloud, on-premises, and hybrid environments.
  • Translate business and technical requirements into secure solution designs.
  • Lead security and architecture reviews for new technologies and systems.
  • Identify weaknesses in proposed solutions, advising on risk mitigation strategies.
  • Collaborate with teams to ensure secure system and service deployment.
  • Provide technical guidance during the system development lifecycle.

Benefits

  • Mentoring opportunities for junior architects and security engineers.
  • Participation in governance boards enhances professional influence.
  • Professional development in the latest technologies and NIST standards.
  • Involvement in continuous improvement initiatives in cybersecurity architecture.
Full Job Description
Architecture & Solution Design
  • Develop enterprise-wide security architectures aligned to NIST standards (e.g., NIST CSF, SP 800-53, SP 800-171, SP 800-207).
  • Design scalable, secure solutions that address identified risks and business objectives across cloud, on-premises, and hybrid environments.
  • Translate business and technical requirements into secure solution blueprints.
  • Contribute to the development of reference architectures and security patterns.
  • Leverage hands on engineering implementation experience to provide prescriptive guidance on best practices and possible pitfalls.


Solution Review & Risk Mitigation
  • Lead architecture and security reviews for new technologies, applications, and systems.
  • Identify gaps and weaknesses in proposed solutions and advise on appropriate risk mitigation strategies.
  • Collaborate with engineering and infrastructure teams to ensure secure deployment of systems and services.
  • Provide technical guidance to project and product teams throughout the system development lifecycle.


Governance & Standards
  • Develop and maintain security architecture standards, policies, and control frameworks in alignment with NIST and industry best practices.
  • Participate in or lead internal security governance boards and architecture review boards.
  • Ensure solutions meet internal risk, compliance, and regulatory requirements (e.g., CCPA, NYDFS, PCI DSS).
  • Contribute to maturity assessments and continuous improvement efforts for cybersecurity architecture.


Collaboration & Leadership
  • Act as a subject matter expert on cybersecurity architecture for stakeholders across IT, engineering, compliance, and risk teams.
  • Mentor junior architects and security engineers.
  • Communicate complex technical and risk concepts clearly to business leaders and non-technical audiences.
  • Stay up to date on emerging threats, technologies, and changes to the NIST ecosystem.


Required Qualifications
  • 7-10 years of experience in cybersecurity, with 3+ years in a security architecture or similar role.
  • Deep working knowledge of NIST frameworks (CSF, SP 800-53, 800-171, 800-207 Zero Trust).
  • Demonstrated experience designing and reviewing secure architectures for enterprise systems and cloud environments (e.g., AWS, Azure).
  • Practical experience translating security architecture requirements into implemented controls, technical configurations, and operational procedures.
  • Strong understanding of cybersecurity domains including identity and access management (IAM), network security, data protection, and application security.
  • Strong understanding of LLMs, AI, and GenAI solutions including agentic AI and MCP hardening.
  • Experience validating control effectiveness through testing, monitoring, evidence collection, or audit support.
  • Experience working in a regulated environment and aligning technical controls to compliance frameworks. Excellent communication, collaboration, and documentation skills.


Preferred
  • Industry certifications such as CISSP, CISM, CISA, SABSA, or AWS Certified Security.
  • Experience with Zero Trust Architecture and modern security models.
  • Experience with security automation, control orchestration, policy-as-code, or continuous control monitoring.
  • Experience implementing security controls in cloud-native, hybrid, and complex enterprise-scale environments.
  • Familiarity with DevSecOps and infrastructure-as-code security.


About OneMain Financial

OneMain Financial is a consumer finance company that provides personal loans and other financial services. The company was founded in 1912 and is headquartered in Evansville, Indiana. OneMain Financial offers loans for a variety of purposes, including debt consolidation, home improvement, and auto financing. The company operates more than 1,500 branches across the United States. OneMain Financial is a subsidiary of Springleaf Holdings, Inc.
Learn more about OneMain Financial
Size
8,800 employees
Market Cap
$4 billion
Industry
Net Income
$730 million
Founded
1912
5 Year Trend
+5%
Revenue
$4.9 billion
NASDAQ

Similar Jobs

More Jobs at OneMain Financial

More Information Technology Jobs

Find similar Cybersecurity Architect jobs: