[Hiring] Chief Information Security Officer @Availity

Role Description

Availity is seeking a Chief Information Security Officer to lead the company’s enterprise cybersecurity, security assurance, and technology risk programs. Reporting directly to the Chief Technology Officer, the Chief Information Security Officer is responsible for protecting Availity, its customers, and the highly sensitive healthcare information entrusted to its platforms.

The successful candidate must have personally led significant healthcare security audit and assurance programs, including:

• Multiple Health Information Trust Alliance assessment or certification cycles
• Multiple System and Organization Controls examination cycles
• Major healthcare customer audits
• Remediation of significant findings

Sponsorship, in any form, is not available for this position.

Location: Remote, US

Qualifications

• Significant executive cybersecurity leadership experience, with substantial cybersecurity leadership experience in healthcare.
• Demonstrated experience protecting PHI and other regulated healthcare data in a large-scale, cloud-based healthcare technology environment.
• Direct executive accountability for major healthcare security audits, certifications, customer assessments, and regulatory examinations.
• Personal leadership of multiple HITRUST assessment or certification cycles and multiple SOC examination cycles.
• Experience leading complex healthcare customer security audits and assessments, including remediation of significant findings and prevention of repeat findings.
• Experience establishing continuous audit readiness, automating control monitoring, and automating audit evidence collection.
• Experience operating security programs across multiple cloud providers and securing highly distributed, virtual, and international teams.
• Experience establishing controls for cross-border access to healthcare information and systems containing PHI or other sensitive healthcare data.
• Board and executive-level communication experience, including presentation of security posture, audit results, risks, incidents, findings, and remediation status.
• Strong knowledge of cloud security, software security, identity, data protection, security operations, incident response, and cyber resilience.
• Proven ability to build and lead high-performing security organizations across multiple countries.

Requirements

• Security leadership experience in a large healthcare technology company serving health plans and healthcare providers.
• Experience with healthcare transaction networks, regulated healthcare data exchanges, large API ecosystems, and major healthcare customers.
• Experience consolidating overlapping security frameworks into a common control environment and materially reducing recurring audit time and cost.
• Experience implementing continuous control monitoring across multiple cloud providers.
• Experience with AI security and governance, acquisition integration, and security teams distributed across the United States and India.

Benefits

• Competitive salary and bonus structure.
• Generous HSA company contribution.
• Healthcare, vision, dental benefits, and a 401k match program available from day one.
• Unlimited PTO for salaried associates + 9 paid holidays.
• Hourly associates start at 19 days of PTO with all the same holiday benefits.
• Reimbursement up to $250/year for gym memberships, racing events, weight management programs, etc.
• Education reimbursement available.
• Paid Parental Leave for both birth and adoptive parents.
• Opportunities to engage with community organizations through volunteer efforts.