Director - Cyber Security Operations

Wellmark, Inc.•Des Moines, IA

15h•Hybrid

About The Position

Provide operational leadership of Wellmark’s Cyber Security Operations department and related disciplines. Collaborate across the organization toward the strategic development and implementation of cyber security policies, standards, and processes aligned to leading industry practices as well as HIPAA, NIST, BCBSA, and all applicable regulatory requirements. Lead domain-specific change efforts resulting from cyber security strategy and policy updates and recommend/implement control changes in response to emerging risks. Partner with departmental leadership and staff to ensure the effective operation of security services that foster enterprise-wide understanding and support of the Corporate Information Security Program.

Requirements

Bachelor’s degree or equivalent experience (4 years).
One or more certifications: CISSP, CISM, CRISC, CCSP, CISA, CISSP-ISSMP.
Minimum 7 years’ experience designing and delivering security solutions, including 5+ years security management, 4+ years implementing security controls, experience in risk identification, analysis, and mitigation, and 3+ years shaping security structure and direction at an organizational or discipline level.
Deep technical cyber security expertise that includes extensive cloud (PaaS) security experience.
Demonstrated ability to lead high-performing teams that deliver results.
Strong communication, influence, and relationship-building skills.
Proven ability to set strategy and drive tactical execution.
Experience leading through change and resolving complex problems.
Strong decision-making and critical-thinking skills.
Knowledge of existing and emerging technologies.

Nice To Haves

Master’s degree.

Responsibilities

Provide strategic direction to a team of individual contributors and leaders to support enterprise goals; communicate strategy and priorities across the team.
Oversee daily management of financial and human resources, including coaching, performance development, and departmental budgeting.
Lead and continuously improve the Cyber Incident Management process using NIST and other cyber-industry best practices.
Coordinate response to cyber-security incidents; advise leaders on risk remediation and process improvement plans.
Oversee cyber-forensics staff and their use of operational practices that ensure legal defensibility and proper chain-of-custody standards.
Establish risk-based incident metrics and reporting.
Develop and maintain the insider threat management program, including user activity monitoring and anomalous behavior detection.
Set operational rules enabling rapid detection without impacting member service.
Lead a best-in-class security awareness program from onboarding through annual training and ad-hoc education.
Lead and participate in the development of clear, practical cyber security policies and collaborate with stakeholders to promote compliance.
Build and lead a high-performing Security Operations Center (SOC) delivering 24x7x365 threat response, ensuring the appropriate use of tools, processes, and performance metrics.
Oversee a cyber security threat intelligence capability that delivers actionable, relevant insights and tangible early-warning value.
Partner with departmental leadership in the administration of the Information Security Program, including the development and enforcement of policy and standards frameworks.
Lead Third Party Risk Management's oversight of processes governing third-party security reviews, and collaborate with Procurement, Legal, and adjacent teams on vendor risk assessment.
Oversee a comprehensive vulnerability management and penetration testing program for applications, systems, cloud environments, and databases.
Establish risk-based remediation expectations and provide operational and executive reporting.
Support the regular maintenance of the strategic cyber security roadmap across managed disciplines.
Work with internal partners and external assessors to identify gaps, evaluate tools, and assess emerging threats.
Provide day-to-day leadership to multiple cyber security teams; develop leaders and staff in alignment with organizational strategy.
Manage budgets, staffing plans, and business cases for technology investments and cyber security enhancements.
Collaborate with Privacy, Legal, and Internal Audit as required for compliance and event investigation purposes.
Act on behalf of the CISO when needed, including participation in executive meetings, industry forums, and major incident leadership.
Other duties as assigned.