[Hiring] Deputy CISO @Availity

Role Description

Availity is seeking a charismatic and accomplished technology leader to join the security leadership team as a Deputy CISO. Reporting to the CISO, the Deputy CISO will manage a team of 5 direct reports with a globally diverse matrix organization. Areas of focus for this role include:

• Identity Access Management
• Risk and Governance
• Data Governance
• Catastrophic Recovery
• Fraud Prevention

This role sits uniquely in a triangle of leadership reporting to the CISO and partnered with a Deputy CISO whose focus areas include Application Security, Security Operations, and Offensive Security.

Drawing on the appropriate experiences in leadership roles in healthcare information security, the Deputy CISO will be responsible for:

• Establishing and maintaining the enterprise vision, strategy, architecture, and a multi-year information security roadmap.
• Communicating security at a strategic level to executive management, the Audit and Compliance Board, and the Board of Directors.
• Evangelizing information security across the business to drive adoption of security best practices.

Sponsorship, in any form, is not available for this position.

Location: Remote US

Why work on this team:

• Lead in a high-profile role that interacts regularly with Availity’s Board of Directors and C-suite executives.
• Maintain and grow a world-class information security function at an organization operating the nation’s largest healthcare network.
• Join a forward-thinking team of technology leaders working toward bettering the overall healthcare system.

Qualifications

• Bachelor's Degree in computer science, engineering, or a related field; (graduate degree preferred).
• 10+ years of IT and/or business leadership experience.
• 5+ years of information security/cybersecurity experience.
• Proven experience delivering quality solutions in a SaaS environment.
• Understanding of Cloud, SaaS, and IoT architectures and their implications on information security strategy.
• Proven experience leading globally diverse teams and working closely with C-suite executives.
• A proven track record in developing information security policies and procedures.
• Extensive knowledge of business risk, risk assessment, and risk-based decision making.
• Able to communicate security and risk-related concepts to both technical and non-technical audiences.
• Proven ability to address and present information to a Board of Directors and/or Executive leadership team.
• A natural influencer and coalition builder; passionate about building high-performing teams.
• Ability to inspire and motivate cross-functional, interdisciplinary teams.
• Ability to evangelize IT security to make it a critical part of business operations.
• Excellent written and verbal communication, interpersonal, and collaborative skills.
• Experienced with contract and vendor negotiations.
• Experienced in incident and crisis management.
• Knowledge of security, risk, and control frameworks and standards.
• Technical acumen including but not limited to: OSI, IT infrastructure, Cloud, application development languages, tools and frameworks.
• Security technology acumen and experience.
• Professional certifications, such as a CISSP, CISM, CISA.
• Ability to travel 10-15%.
• Healthcare technology industry experience including payer and provider spaces is a plus.

Requirements

• Lead a team of 5 direct reports with a matrix organization of 35-40 globally diverse associates.
• Develop and implement a strategic, long-term information security strategy and roadmap.
• Work with senior leaders across the business to assess and communicate acceptable levels of risk.
• Identify, evaluate, and report on information security risks to the Executive Committee and the Board of Directors.
• Develop, mentor, and manage a high-performing staff of information security professionals.
• Lead the development of up-to-date information security policies, procedures, standards, and guidelines.
• Ensure that the security management program is compliant with applicable laws, regulations, and contractual requirements.
• Act as the champion for the enterprise information security program and foster a security-aware culture.
• Oversee the evaluation, selection, and implementation of information security solutions.
• Manage regular intrusion detection and vulnerability reporting.
• Develop business metrics to measure the effectiveness of the security management program.
• Monitor the industry and external environment for emerging threats.
• Liaise with law enforcement and other advisory bodies as necessary.
• Oversee incident response planning and the investigation of security breaches.
• Lead due diligence and post-integration activities related to information security for all M&A activity.

Benefits

• Competitive salary and bonus structure.
• Generous HSA company contribution, healthcare, vision, dental benefits, and a 401k match program.
• Unlimited PTO for salaried associates + 9 paid holidays.
• Reimbursement for gym memberships and wellness programs up to $250/year.
• Education reimbursement.
• Paid Parental Leave for both moms and dads.
• Opportunities to engage in community service and volunteer activities.