Deputy CISO

This is a fully remote position, open to applicants in United States.

📋 Description

• Lead a team of 5 direct reports within a matrix organization consisting of 35–40 globally diverse associates.

• Develop and execute a strategic, long-term information security strategy and roadmap.

• Ensure that Availity’s and its customers’ information assets are sufficiently protected.

• Assess and communicate acceptable risk levels to senior business leaders.

• Identify, evaluate, and report information security risks, practices, and projects to the Executive Committee and Board of Directors.

• Provide expert knowledge on security standards and best practices.

• Develop, mentor, and manage a high-performing information security team.

• Enhance the Board’s understanding of security beyond a compliance-only perspective.

• Lead the development, approval, dissemination, and maintenance of information security policies, procedures, standards, and guidelines.

• Ensure compliance of the security management program with all applicable laws, regulations, and contractual obligations.

• Champion the enterprise information security program and promote a security-aware culture.

• Oversee the evaluation, selection, and implementation of innovative, cost-effective information security solutions.

• Collaborate with enterprise architecture, infrastructure, and applications teams for secure technology development and maintenance.

• Manage intrusion detection, vulnerability reporting, IT audit reviews, and remediation coordination.

• Develop business metrics to assess and enhance the maturity of the security program.

• Monitor emerging threats and advise stakeholders on appropriate responses.

• Liaise with law enforcement and advisory bodies as necessary.

• Oversee incident response planning and security breach investigations.

• Manage vendor and third-party risk management processes.

• Lead information security due diligence and post-integration activities for mergers and acquisitions.

⛳️ Requirements

• Bachelor's Degree in computer science, engineering, or a related field; a graduate degree is preferred.

• 10+ years of experience in IT and/or business leadership.

• 5+ years of experience in information security/cybersecurity.

• Proven track record of delivering quality solutions in a SaaS environment.

• Understanding of Cloud, SaaS, and IoT architectures and their information security implications.

• Experience in creating secure operating environments in the Cloud.

• Experience leading globally diverse teams and collaborating closely with C-suite executives.

• Proven ability in developing and executing information security policies and procedures.

• Extensive knowledge of business risk, risk assessment, and risk-based decision-making.

• Ability to communicate security and risk concepts effectively to both technical and non-technical audiences, including board members.

• Capability to present to a Board of Directors and/or Executive leadership team.

• Ability to inspire and motivate cross-functional, interdisciplinary teams.

• Excellent written, verbal, interpersonal, and collaborative communication skills.

• Experience with contract and vendor negotiations.

• Background in incident and crisis management.

• Knowledge of HITRUST, ISO 27001/27002, SANS-CAG, NIST, FISMA, COBIT, COSO, and ITIL.

• Technical expertise in OSI, IT infrastructure, Cloud, application development, databases, web technologies, mobile, network and enterprise architecture, and directory services.

• Security technology experience with firewalls, intrusion detection, cyber-attack tools and defenses, encryption, certificate authority, web filtering, anti-malware, anti-phishing, identity and access management, and multi-factor authentication.

• Professional certifications such as CISSP, CISM, or CISA.

• Willingness to travel 10–15% of the time.

• Experience in the healthcare technology industry, particularly in payer and provider spaces, is a plus.

• Must pass a drug test prior to starting employment.

• Must be eligible to work in the United States; sponsorship is not available.

• Camera use is required for all virtual meetings.

🏝️ Benefits

• Competitive salary and bonus structure.

• Generous HSA company contribution.

• Healthcare, vision, and dental benefits.

• 401k match program available from day one.

• Unlimited PTO for salaried associates.

• 9 paid holidays.

• Gym, racing event, and weight management reimbursement up to $250/year.

• Education reimbursement.

• Paid parental leave for both birth and adoptive parents.

• Diversity & Inclusion teams and employee groups.

• Continuous learning resources and experts.

• Community volunteering opportunities.

• Remote-first work environment.

• Camera/video capability for remote work.