Principal, Corporate Information Security

At Cotality, we are driven by a single mission—to make the property industry faster, smarter, and more people-centric. Cotality is the trusted source for property intelligence, with unmatched precision, depth, breadth, and insights across the entire ecosystem. Our talented team of 5,000 employees globally uses our network, scale, connectivity, and technology to drive the largest asset class in the world. Join us as we work toward our vision of fueling a thriving global property ecosystem and a more resilient society.

About the role

We are looking for a Principal, Corporate Information Security to step in as a true Business Information Security Officer (BISO) for our internal business verticals. This role acts as InfoSec Quality Assurance, sitting directly between our technical security teams and business units—initially focusing on our Insurance business vertical—to evaluate security postures, assess risk maturity, and transition operations from an ad-hoc state to a defined, managed model. You will guide executive teams to make smart risk decisions and eventually expand coverage across additional business verticals.

Responsibilities

• Act as the primary security advisor for business leaders across assigned verticals, reviewing architecture, assessing vulnerability data, and evaluating risk maturity before go-live.
• Review internal security exceptions, track remediations, and translate technical vulnerabilities into business impact for executive understanding.
• Run governance reviews to ensure identity and access controls align with enterprise policies.
• Participate in incident response and change control oversight.
• Enable the business to move fast while maintaining security by finding "secure yes" solutions.

Core Competencies and Skills

• Enterprise Risk & Architecture: Deep hands-on experience in enterprise risk management and internal security architecture, including threat modeling, designing compensating controls, and applying defense-in-depth principles.
• Executive Presence & Negotiation: Ability to hold the line on critical security requirements while helping business leaders find secure solutions.
• Translation & Risk Articulation: Skill in explaining complex technical concepts in everyday language to non-technical leaders, focusing on operational or financial risk.
• Governance Frameworks: Strong working grasp of frameworks like COBIT, NIST CSF, or ISO 27001, with the ability to operationalize them for active business use.
• Security Design: Familiarity with models like SABSA, ensuring security aligns with business strategy by tracing high-level objectives to specific technical controls.
• Collaborative Mindset & Culture Building: Bridge between engineering teams and business units, fostering a security-first culture and mentoring others.

Requirements

Tools & Technologies

• Vulnerability & Scan Management (Required): Hands-on expertise using Qualys (must-have) and Veracode to evaluate scan outputs, track vulnerabilities, and guide remediation. Experience with Black Duck is highly preferred.
• Data & Reporting Visualization (Required): Proficiency in building executive risk dashboards using Google Looker / Looker Studio, Tableau, or Power BI.
• GRC & Security Ratings (Required): Direct experience with enterprise GRC platforms (e.g., Archer GRC) and third-party security rating platforms like BitSight or SecurityScorecard.
• AI Security & Emerging Threats (Strong Differentiator): Ability to evaluate security controls for enterprise AI adoption, including assessing risks around prompt injection, rogue AI, AI agents, and AI data pipeline governance.

Education and Certifications

• Bachelor’s degree in IT, Cybersecurity, Computer Science, or a related field (or 8+ years of equivalent senior security experience).
• CISSP is required (rare exceptions considered for exceptionally qualified candidates). CISM or SABSA certifications are additional pluses.

Pay

Annual pay range: $134,400 - $165,000 USD

Benefits

At Cotality, we offer a benefits experience designed to support your whole self, including:

• Time off: Generous PTO, 11 paid holidays, well-being time off, and volunteer time off.
• Family Support: Up to 16 weeks of fully paid parental leave and a baby stipend.
• Health: Multiple medical plan options with mental health and wellness support.
• Retirement: 401(k) with company match and vesting after one year.
• Financial Perks: $400 annual well-being stipend and tuition assistance up to $5,250.
• Extras: Recognition Rewards, referral bonuses, and exclusive discounts.