[Hiring] Senior Director, Identity & Risk Management @Availity

Role Description

Availity is seeking an accomplished technology leader to join our information security leadership team as Senior Director, Identity & Risk Management. Reporting to the CISO, the Senior Director will manage a team of approximately four direct reports with a globally diverse matrix organization. Areas of focus for this role include:

• Workforce and Client Identity & Access Management
• Governance, Risk & Compliance (GRC)
• Fraud Investigations

This role sits uniquely in a triangle of leadership reporting to the CISO and partnered with a Deputy CISO whose focus areas include Application Security, Security Operations & Cyber Defense, and Cloud Security.

Key responsibilities include:

• Establishing and maintaining the enterprise vision, strategy, and a multi-year information security roadmap.
• Communicating security at a strategic level to executive management and the Audit and Compliance Board.
• Evangelizing information security across the business to drive adoption of security best practices.

Qualifications

• Bachelor's Degree in computer science, engineering, a related field, or equivalent experience.
• 10+ years of IT and/or business leadership experience.
• 5+ years of information security/cybersecurity experience.
• Proven experience delivering quality solutions in a SaaS environment.
• Understanding of Cloud, SaaS, and IoT architectures, and their implications on information security strategy.
• Proven experience leading globally diverse teams and working closely with C-suite executives.
• A proven track record in developing information security policies and procedures, and successful execution.
• Extensive knowledge of business risk, risk assessment, and risk-based decision making.
• Able to communicate security and risk-related concepts to both technical and non-technical audiences.
• Proven ability to address and present information to a Board of Directors and/or Executive leadership team.
• A natural influencer and coalition builder; passionate about building high performing teams.
• Ability to inspire and motivate cross-functional, interdisciplinary teams.
• Ability to evangelize IT security to make it a critical part of business operations.
• Excellent written and verbal communication, interpersonal and collaborative skills.
• Experienced with contract and vendor negotiations.
• Experienced in incident and crisis management.
• Knowledge of security, risk, and control frameworks and standards.
• Technical acumen including but not limited to: OSI, IT infrastructure, Cloud, application development languages, tools and frameworks.
• Security technology acumen and experience.
• Professional certifications, such as a CISSP, CISM, CISA.
• Ability to travel 10-15%.
• Healthcare technology industry experience including payer and provider spaces is a plus.

Requirements

• Lead a team of 4 direct reports with a matrix organization of 30-35 globally diverse associates.
• Develop and implement a strategic, long-term information security strategy and roadmap.
• Work with senior leaders across the business to assess and communicate acceptable levels of risk.
• Identify, evaluate, and report on information security risks to the Executive Committee and the Board of Directors.
• Develop, mentor, and manage a high performing staff of information security professionals.
• Lead the development of up-to-date information security policies, procedures, standards, and guidelines.
• Ensure that the security management program is compliant with applicable laws, regulations, and contractual requirements.
• Act as the champion for the enterprise information security program and foster a security-aware culture.
• Oversee the evaluation, selection, and implementation of information security solutions.
• Manage regular intrusion detection and vulnerability reporting.
• Develop business metrics to measure the effectiveness of the security management program.
• Monitor the industry for emerging threats and advise relevant stakeholders.
• Liaise with law enforcement and other advisory bodies as necessary.
• Oversee incident response planning and the investigation of security breaches.
• Oversee and lead the creation, communication, and implementation of a process for managing vendor risk.

Benefits

• Competitive salary and bonus structure.
• Generous HSA company contribution, healthcare, vision, dental benefits, and a 401k match program.
• Unlimited PTO for salaried associates + 9 paid holidays.
• Reimbursement up to $250/year for gym memberships and wellness programs.
• Education reimbursement for furthering your education.
• Paid Parental Leave for both moms and dads.
• Opportunities to engage with community organizations through volunteer efforts.