Director – Security Risk

This is a fully remote position, open to applicants in California, +14 more states.

📋 Description

• Take ownership of and consistently enhance the Security Risk Strategic Roadmap.

• Convert strategic initiatives into actionable efforts and projects.

• Collaborate across various teams and departments to promote roadmap goals and initiative objectives.

• Cultivate and lead a high-performing Security Risk Strategy team.

• Offer strategic thought leadership and guidance to senior security and executive leadership.

• Manage and supervise security risk strategy teams, including recruitment, onboarding, training, task assignment, goal setting, performance management, and career development.

• Oversee the ongoing strategic planning lifecycle and communicate the Security Risk Strategic Roadmap.

• Enhance security risk strategy processes, methods, and alignment with business segments and security capabilities.

• Facilitate the bi-annual review of the Security Risk Strategic Roadmap with senior security leadership.

• Collaborate with business units to integrate business requirements into strategic plans based on the threat landscape.

• Provide advisory services to BISOs, Compliance Officers, and senior leaders.

• Create and communicate a long-term vision and strategic plan to enhance the company's security posture and mitigate enterprise risk.

• Engage with auditors and regulators to showcase Centene's security strategy processes and capabilities.

• Contribute to defining and shaping industry trends and regulations.

• Adhere to all policies and standards while performing other assigned duties.

⛳️ Requirements

• Bachelor's degree in Information Security, Information Technology, Computer Science, or a related field, or equivalent experience is required.

• A Master's degree is preferred.

• 8+ years of experience with security capabilities, technologies, and architecture.

• 5+ years of experience in team leadership roles.

• CISSP-ISSAP, CISSP-ISSMP, CISSP, CISM, or a related advanced Risk or Security certification is required.

• Strong technical background in cybersecurity and GRC, with experience collaborating with architects and technical teams.

• Enterprise-level experience with third-party risk management and Cyber Risk Quantification (CRQ).

• Ability to articulate complex technology risk into clear, actionable insights for executive leadership.

• Exceptional executive presence, along with strong presentation and written and verbal communication skills.

• Experience in large, highly regulated organizations, preferably in the healthcare sector.

• Must be authorized to work in the U.S. without the need for employment-based visa sponsorship, now or in the future.

🏝️ Benefits

• Health insurance.

• 401K plan.

• Stock purchase plans.

• Tuition reimbursement.

• Paid time off plus holidays.

• Flexible work options including remote, hybrid, field, or office work schedules.

• Additional incentives may be included in total compensation.