Deputy CISO

Job Description:

• Lead a team of 5 direct reports within a matrix organization of 35-40 globally diverse associates
• Develop and implement a strategic, long-term information security strategy and roadmap
• Ensure Availity’s and its customers’ information assets are adequately protected
• Assess and communicate acceptable levels of risk with senior business leaders
• Identify, evaluate, and report information security risks, practices, and projects to the Executive Committee and Board of Directors
• Provide subject matter expertise on security standards and best practices
• Develop, mentor, and manage a high-performing information security staff
• Develop the Board’s understanding of security beyond a compliance-only view
• Lead development, approval, dissemination, and maintenance of information security policies, procedures, standards, and guidelines
• Ensure the security management program complies with applicable laws, regulations, and contractual requirements
• Champion the enterprise information security program and foster a security-aware culture
• Oversee evaluation, selection, and implementation of innovative, cost-effective information security solutions
• Partner with enterprise architecture, infrastructure, and applications teams on secure technology development and maintenance
• Manage intrusion detection and vulnerability reporting, IT audit reviews, and remediation coordination
• Develop business metrics to measure and increase security program maturity
• Monitor emerging threats and advise stakeholders on appropriate actions
• Liaise with law enforcement and advisory bodies as necessary
• Oversee incident response planning and security breach investigations
• Oversee vendor and third-party risk management processes
• Lead information security due diligence and post-integration activities for M&A

Requirements:

• Bachelor's Degree in computer science, engineering, or a related field; graduate degree preferred
• 10+ years of IT and/or business leadership experience
• 5+ years of information security/cybersecurity experience
• Proven experience delivering quality solutions in a SaaS environment
• Understanding of Cloud, SaaS, and IoT architectures and their information security implications
• Experience creating secure operating environments in the Cloud
• Experience leading globally diverse teams and working closely with C-suite executives
• Track record developing and executing information security policies and procedures
• Extensive knowledge of business risk, risk assessment, and risk-based decision making
• Ability to communicate security and risk concepts to technical and non-technical audiences, including board level
• Ability to present to a Board of Directors and/or Executive leadership team
• Ability to inspire and motivate cross-functional, interdisciplinary teams
• Excellent written, verbal, interpersonal, and collaborative skills
• Experience with contract and vendor negotiations
• Experience in incident and crisis management
• Knowledge of HITRUST, ISO 27001/27002, SANS-CAG, NIST, FISMA, COBIT, COSO, and ITIL
• Technical acumen in OSI, IT infrastructure, Cloud, application development, databases, web technologies, mobile, network and enterprise architecture, and directory services
• Security technology experience with firewalls, intrusion detection, cyber-attack tools and defenses, encryption, certificate authority, web filtering, anti-malware, anti-phishing, identity and access management, and multi-factor authentication
• Professional certifications such as CISSP, CISM, or CISA
• Ability to travel 10-15%
• Healthcare technology industry experience, including payer and provider spaces, is a plus
• Must pass a drug test before beginning employment
• Must be eligible to work in the United States; sponsorship is not available
• Camera use is required for all virtual meetings

Benefits:

• Competitive salary and bonus structure
• Generous HSA company contribution
• Healthcare, vision, and dental benefits
• 401k match program available on day one
• Unlimited PTO for salaried associates
• 9 paid holidays
• Gym, racing event, and weight management reimbursement up to $250/year
• Education reimbursement
• Paid parental leave for birth and adoptive parents
• Diversity & Inclusion teams and employee groups
• Continuous learning resources and experts
• Community volunteering opportunities
• Remote-first work environment
• Camera/video capability for remote work