[Hiring] Director of Information Security @Milliman

Role Description

The Director of Information Security will hold a role that is crucial to the continued success of our business. To meet the high expectations that we (and our clients) have of our systems and data, we are seeking a proven leader to provide the strategic direction and integrity of our company-wide InfoSec program, based upon sound knowledge of our business operations and industry standards of excellence.

The Director of Information Security will coordinate the development, maintenance, enhancement, and execution of best practices. Leveraging their knowledge of cyber security industry trends and standards of excellence, they will lead change and drive results across long-term projects and short-term tactical problem solving. As a part of our Technology leadership team, you will work closely with other leaders to ensure the security of all aspects of Information Technology and data security as we continue to develop innovative SaaS solutions.

What you will be doing

• Lead IntelliScript's security strategy and program
• Develop and execute a multi-year information security strategy and roadmap aligned with IntelliScript's business, technology, product, and client priorities.
• Lead the overall Information Security program, establishing priorities, operating rhythms, governance, metrics, and accountability.
• Lead IntelliScript's information security steering committee and communicate security risks, priorities, investments, and progress to senior leadership.
• Develop, maintain, and continuously improve information security policies, standards, controls, and practices.
• Own enterprise security risk
• Lead IntelliScript's information security risk-management program, partnering with business and technology leaders to identify, assess, prioritize, mitigate, and appropriately accept risk.
• Maintain a clear view of IntelliScript's highest security risks and translate technical risks into business terms that enable effective executive decision-making.
• Lead third-party security risk management and ensure vendors and partners meet appropriate security expectations.
• Partner with stakeholders on security requirements associated with clients, vendors, contracts, and strategic initiatives.
• Protect our technology and products
• Partner deeply with software engineering, product, infrastructure, and IT teams to embed security throughout the technology lifecycle.
• Establish and mature security practices appropriate to cloud-native, SaaS, and hybrid environments.
• Oversee vulnerability management, penetration testing, threat monitoring, security testing, and preventative controls.
• Assess the security technology portfolio and recommend investments based on risk, effectiveness, scalability, and business need.
• Drive security-by-design practices that allow teams to move quickly without creating unacceptable risk.
• Lead security operations and incident readiness
• Maintain an effective incident-response program with clearly established roles, escalation paths, response procedures, and communications.
• Provide leadership during significant security events and ensure lessons learned translate into stronger controls and practices.
• Ensure appropriate monitoring and capabilities exist to identify threats, vulnerabilities, breaches, malware, and data leakage.
• Lead compliance and assurance
• Maintain a sustainable security and compliance program supporting IntelliScript's regulatory, contractual, and client commitments.
• Lead security activities supporting SOC and HITRUST certifications.
• Partner with stakeholders responsible for privacy, legal, compliance, and technology to address requirements involving HIPAA, PHI, PII, and other applicable obligations.
• Oversee security audits, assessments, findings, remediation, and evidence-management processes.
• Ensure IntelliScript can respond effectively and credibly to customer security due diligence.
• Build a security-minded organization
• Lead, coach, develop, and retain a high-performing Information Security team.
• Create clear accountability while empowering team members to own outcomes and grow professionally.
• Lead company-wide security awareness and education.
• Build strong relationships across IntelliScript and make Information Security a trusted, pragmatic partner to the business.
• Develop security metrics and reporting that help leaders understand risk and make informed decisions.

Qualifications

• 10+ years of relevant experience:
• Developing and monitoring information security policies and programs
• Facilitating information security governance
• Executing ongoing risk assessment processes
• Investigating breaches
• Managing relevant budgets
• Implementing firewalls, IDS/IPS, SIEM
• Change management via methods that lead to adherence
• 5+ years of related experience managing information security functions and employees
• Extensive experience managing security, risk, and compliance elements of cloud migrations, cloud native development and hybrid environments
• At least one professional certification (CISSP, CISM, GIAC, etc.)
• In-depth knowledge of information security technologies and architectures, and their applications, to mitigate environmental risks within the network, systems, and data structures
• Continuous learner that stays on top of the latest trends in security and technology
• Demonstrated thought leadership in information security and creating innovative, scalable business solutions with the ability to lead and motivate cross-functional, interdisciplinary teams
• Work experience in a software / SaaS setting
• Experience working in Agile software development environment
• Excellent program and project management skills
• Excellent written and verbal communication skills
• Past experience working in a HIPAA, PHI, and PII compliant environment

What you bring to the table

• Demonstrates ownership, urgency, and professionalism
• Coaches, mentors and motivates others to meet the organization’s goals; provides an inclusive and positive team environment that fosters positive and constructive feedback, recognition, leadership, and personal and professional development
• Convey confidence in employees' ability to be successful; allowing employees freedom to decide how they will accomplish their goals; provides authority and resources
• Ability to tackle a problem by using a logical, systematic, sequential approach to generate sensible, realistic, practical solutions to problems
• Verifies important details, ensures there are no surprises or gaps in needed information
• Deals effectively not just with concrete, tangible issues but with abstract, conceptual matters
• Demonstrates the ability to evaluate information using a variety of proven methods and techniques
• Identifies a problem, obstacle or opportunity and takes appropriate action to address current or future problems or opportunities; begins and follows through with a plan or task
• Application of knowledge and skills needed to perform effectively in a specific job or group of jobs within the organization. Loves to learn, takes every opportunity they’re given to develop knowledge and skills
• Demonstrated “let’s find a way to do it” attitude – no task is too big or too small, always willing to pitch in and help someone else

Wish list

• Bachelor’s degree or advanced degree (Master’s, etc.)
• Experience in insurance underwriting, banking, and/or health industry
• Experience working in SAFe product development environments
• Project management certification (PMP, etc.)

Location

The expected application deadline for this job is January 31, 2027. This position is open to remote work. Applicants must be willing to travel to the Milliman office in Brookfield, WI as needed and travel nationwide for meetings, conferences, and team events up to 20%.

Compensation

The overall salary range for this role is $165,100 - $313,145. For candidates residing in:

• Alaska, California, Connecticut, Illinois, Maryland, Massachusetts, New Jersey, New York City, Pennsylvania, Virginia, Washington, or the District of Columbia the range is $189,865 - $313,145.
• All other locations the range is $165,100 - $272,300.

A combination of factors will be considered, including, but not limited to, education, relevant work experience, qualifications, skills, certifications, etc.

Milliman Benefits

• Medical, Dental and Vision – Coverage for employees, dependents, and domestic partners
• Employee Assistance Program (EAP) – Confidential support for personal and work-related challenges
• 401(k) Plan – Includes a company matching program and profit-sharing contributions
• Discretionary Bonus Program – Recognizing employee contributions
• Flexible Spending Accounts (FSA) – Pre-tax savings for dependent care, transportation, and eligible medical expenses
• Paid Time Off (PTO) – Begins accruing on the first day of work. Full-time employees accrue 15 days per year, and employees working less than full-time accrue PTO on a prorated basis
• Holidays – A minimum of 10 paid holidays per year
• Family Building Benefits – Includes adoption and fertility assistance
• Paid Parental Leave – Up to 11 weeks of paid leave for employees who meet eligibility criteria
• Life Insurance & AD&D – 100% of premiums covered by Milliman
• Short-Term and Long-Term Disability – Fully paid by Milliman

Equal Opportunity

All qualified applicants will receive consideration for employment, without regard to race, color, religion, sex, sexual orientation, national origin, disability, or status as a protected veteran.