Chief Information Security Officer

Menasha•Menasha, WI

5d•Hybrid

About The Position

The Chief Information Security Officer (CISO) is a director level role responsible for establishing and maintaining the information security program to ensure that information assets and associated technology, applications, systems, infrastructure and processes are adequately protected in the digital ecosystem in which we operate. The CISO is responsible for identifying, evaluating and reporting on legal and regulatory, IT, and cybersecurity risk to information assets, while supporting and advancing business objectives.

Requirements

Bachelor’s degree in MIS, engineering or closely related field required.
10 years’ experience in senior IT roles required
10 years’ experience and knowledge of the Health Plan business required
3+ years’ experience in a leadership position
CISA, CISM or CISSP or ability to obtain within one year in the position

Nice To Haves

Master’s degree preferred

Responsibilities

A key leader of the incident response team (IRT).
Collaborates with compliance and legal departments as appropriate regarding the incident
Define, develop, and implement risk management structures, strategies, and policies to reduce risk and to prevent and defend against information security attacks
Govern, evaluate, and respond to risks involving the organization's protected data and interests; assure all information systems concerning security policies are operating correctly and compliantly
Recognize the security challenges in the current and future state of business operations; provide the organization with the right tools, skills, resources, relationships, and capabilities to protect against growing information security risks
Determine information security policies and strategies; structure security initiatives with security programs and business objectives
Provide senior technical leadership to IT and the enterprise including being conversant with the future direction of systems, how that direction will impact the enterprise, and how future and current systems can be exploited for the benefit of the enterprise
Manages intrusion detection services (IDS) architectures including enterprise-scale firewall architectures, disruption investigation and forensics methods and technologies, secure messaging architectures, cyber security controls, and distributed computing platforms
Oversee the development, implementation, and enforcement of information security standards and procedures
Conduct threat and vulnerability assessments as appropriate within the organization
Oversee the investigation of data security breaches, including internal communications
Develop and champion the corporate security awareness program