Senior Security Architect

ABOUT BESTOW

Life insurance is one of the world's most important products. It's also one of the hardest to build, distribute, and modernize. Bestow exists to change that.

Bestow is a leading vertical technology platform serving some of the largest and most innovative life insurers. Our platform unifies the fragmented, legacy value chain, enabling carriers to launch products in weeks instead of years. Carriers choose us to scale and operate at unprecedented speed, powered by AI and automation.

Bestow isn't selling policies. We're building the infrastructure that helps an entire industry move faster, reach more people, and deliver on its promise.

Backed by leading investors (Goldman Sachs, Hedosophia, NEA, Valar, 8VC) and trusted by major carriers, Bestow is powered by a team that moves with precision, purpose, and heart. If you want to help reimagine a centuries-old industry with lasting impact, join us.

Bestow offers flexible remote/hybrid work, meaningful benefits, equity, and substantial growth opportunities.

Bestow participates in the E-Verify Program.

ABOUT THE TEAM

Bestow's legal, compliance, and security team aims to maintain strict compliance within the highly regulated insurance industry and make doing so part of Bestow’s workforce’s culture. The team regularly facilitates training, evaluations, and audits of the company processes to support product, insurance, marketing, and other teams operating efficiently and within the law. From contract negotiations to regulatory filings and risk mitigation, we aim to maintain Bestow’s reputation as one of professionalism and integrity.

You will report into the Deputy, CISO, and this role is open to Remote (US). #LIRemote

WHAT YOU’LL DO

As a Senior Security Architect, you will play a critical role in designing, implementing, and continuously testing security solutions to protect our company's information systems and assets. You will serve as a strategic liaison between Security, Infrastructure, and Engineering teams to develop a comprehensive security architecture framework that supports secure AI integration and experimentation, aligns with business objectives, and meets regulatory requirements.

You will define architectural standards that include native capabilities for automated monitoring and self-healing across our multi-cloud environments. You will support our company-wide information security governance program by maintaining the control assurance program and partnering with business leaders to periodically assess, test, and collect audit artifacts for review by the Deputy Chief Information Security Officer. Additionally, you will contribute to the Incident Response program by reviewing and maintaining documentation and developing or participating in training exercises to ensure the organization remains resilient against emerging threats.

• In collaboration, develop and maintain the Security Architecture roadmap that preserves a strong security posture and aligns with corporate objectives.

• Lead the development and implementation of automation for established and new security processes to increase operational efficiency and reduce manual intervention.

• Develop the architectural framework for the secure deployment of AI, designing foundational layers for Model Security, Data Privacy, and Autonomous Agent orchestration.

• Design complex multi-cloud infrastructures where security controls are programmatically enforced and globally consistent.

• Provide technical guidance on securing CI/CD pipelines and managing security within Github and other SaaS-based development tools.

• Continuously assess security systems and infrastructure to identify vulnerabilities and develop remediation plans through risk assessments, penetration tests, and other scanning methodologies.

• Advise teams on secure coding, encryption, authentication, and access controls.

• Lead and collaborate with IT, Engineering, Legal, Finance, Insurance Operations, External Examiners, and other business areas as necessary during compliance exams.

• Prepare metrics and reporting for review by Security Leadership, offering recommendations for remediation that satisfy security best practices and audit scrutiny.

• Evaluate emerging security technologies, trends, and threats to ensure the company is best positioned to defend its landscape.

• Review and contribute to effective and efficient information security process documentation that supports and drives compliance to Bestow Information Security Policies, Standards, and applicable regulatory requirements. Research, understand, and inte