Team Leader - Information Security Engineering

Why Wellmark: We are a mutual insurance company owned by our policy holders across Iowa and South Dakota, and we’ve built our reputation on over 80 years’ worth of trust. We are not motivated by profits. We are motivated by the well-being of our friends, family, and neighbors-our members. If you’re passionate about joining an organization working hard to put its members first, to provide best-in-class service, and one that is committed to sustainability and innovation, consider applying today!

Why Wellmark Technology? Wellmark is building innovative, modern solutions using cutting edge technology. We are driving organizational transformation and business strategy by empowering our technology team to innovate new and elegant solutions to enhance the customer experience. Together, we are leaning into the future, owning the outcome, and driving organizational change to transform how we work.

We are seeking an experienced and inspiring leader to guide our Security Engineering team and advance our organization's security capabilities. This role is responsible for building, developing, and empowering the team while driving the delivery of innovative security solutions that protect critical applications, data, and technology platforms. The successful candidate will foster a culture of collaboration, accountability, and continuous improvement, partnering across technology, risk, compliance, and business teams to align security priorities with organizational objectives. Through agile delivery practices, automation, and emerging technologies, this leader will strengthen our security posture, reduce risk, and enhance operational resilience.

Preferred:

• Experience leading security engineering, Security Operations Engineering, Infrastructure Security, Application Delivery, Identity Security, or Cloud Security teams.
• Experience developing or contributing to security strategies, technology roadmaps, and multi-year modernization initiatives.
• Experience supporting regulatory examinations, security audits, and compliance programs within a regulated industry.
• 4 years in information security, cybersecurity, or security engineering roles.
• Experience leading design, implementation, operating, and supporting enterprise security controls, platforms, and services across infrastructure, cloud, applications, identity, data protection, and endpoint environments.
• Experience integrating security practices into technology delivery processes, including secure software development, an Agile and product-based approach to delivery, automation, DevSecOps, and operational excellence initiatives.
• Knowledge of cybersecurity frameworks, industry standards, and regulatory requirements, including NIST, ISO 27000 series, HIPAA, SOC, and other applicable security and privacy standards

Required:

• Bachelor’s degree in computer science, information systems, cybersecurity, engineering, or a related field, or equivalent combination of education and relevant experience.
• Minimum 5+ years of progressive experience in information technology.
• Understanding of security principles, secure system design, and cybersecurity best practices.
• Demonstrated experience leading, mentoring, coaching, and developing technical professionals through formal or informal leadership responsibilities, including employee development, workload planning, and project or initiative leadership.
• Ability to influence technical decisions, promote adoption of security controls and engineering best practices, and support the implementation of security standards across technology teams.
• Proven ability to build collaborative relationships and communicate effectively with engineering, architecture, operations, risk, compliance, audit, and business partners, including the ability to explain technical concepts and risks to diverse audiences.
• Strong analytical, problem-solving, and decision-making skills, with the ability to evaluate complex situations and recommend practical, risk-based solutions.
• Demonstrated experience leading projects, programs, or technical initiatives, including managing competing priorities, tracking
• progress, and delivering results.
• Experience supporting organizational change, continuous improvement efforts, and operational excellence initiatives within a
• technical environment.
• Ability to develop and execute tactical plans and team objectives that align with departmental goals and business priorities.
• Travel required intermittently, up to 5%.

• Provide day-to-day leadership and guidance to team members through coaching, mentoring, performance management, career development, workload planning, budgeting and resource coordination. Foster a culture of accountability, collaboration, innovation, and continuous improvement.
• Support the development and execution of Security Engineering roadmaps, priorities, and operational processes to align with cybersecurity objectives, risk management priorities, and regulatory requirements.
• Lead and coordinate efforts to strengthen the organization's security posture by identifying security gaps, evaluating risks, reducing technical security debt, improving vulnerability management processes, and prioritizing remediation activities based on business and cybersecurity risk.
• Drive the adoption of automation, orchestration, AI-enabled capabilities, and modern engineering practices to improve efficiency, scalability, resilience, and security outcomes. Oversee the implementation, operational readiness, lifecycle management, and support of security technologies and services.
• Support organizational change initiatives and evolving cybersecurity priorities by building strong partnerships and collaborating effectively with business, technology, architecture, product, risk, compliance, audit, and external stakeholders.
• Oversee day-to-day observability and monitoring capabilities, operational reporting, compliance activities, audit support, and adherence to industry standards and internal security policies. Escalate and communicate risks, issues, and progress to leadership and key stakeholders.
• Provide technical leadership and coordination for disaster recovery planning, recovery testing, and preparedness activities across supported environments. Partner with technology and business teams to validate recovery readiness, support recovery efforts during significant incidents, and identify opportunities to improve resilience and business continuity capabilities.
• Perform other duties as assigned.

All your information will be kept confidential according to EEO guidelines.

An Equal Opportunity Employer

The policy of Wellmark Blue Cross Blue Shield is to recruit, hire, train and promote individuals in all job classifications without regard to race, color, religion, sex, national origin, age, veteran status, disability, sexual orientation, gender identity or any other characteristic protected by law.

Applicants requiring a reasonable accommodation due to a disability at any stage of the employment application process should contact us at [email protected]

Please inform us if you meet the definition of a " Covered DoD official ".

At this time, Wellmark is not considering applicants for this position that require any type of immigration sponsorship (additional work authorization or permanent work authorization) now or in the future to work in the United States. This includes, but IS NOT LIMITED TO: F1-OPT, F1-CPT, H-1B, TN, L-1, J-1, etc. For additional information around work authorization needs please refer to the following resources:Nonimmigrant Workers and Green Card for Employment-Based Immigrants

Wellmark supports and expects the responsible use of AI for our workforce! We welcome the responsible use of these tools by job seekers as well and are interested in learning from you; you will have an opportunity in the application process to share which tools you used and how you applied them.