Director of Information Security - IntelliScript (Remote)

Milliman•Brookfield, WI

16h•Remote

About The Position

The Director of Information Security provides strategic direction for IntelliScript’s company-wide information security program. As a member of the Technology leadership team, this leader works with business, product, engineering, infrastructure, and IT teams to protect company systems and data while enabling the development of innovative SaaS products. The role leads security strategy, risk management, security operations, compliance, and assurance, and translates technical risks into information senior leaders can use to make decisions. The Director develops and executes a multi-year security strategy and roadmap; establishes program governance, priorities, metrics, and accountability; and leads the information security steering committee. The role oversees risk assessment and mitigation, third-party security, security-by-design, vulnerability management, penetration testing, threat monitoring, incident readiness, audits, and customer security due diligence. It also leads security activities supporting SOC and HITRUST certifications and works with privacy, legal, compliance, and technology stakeholders on requirements involving HIPAA, PHI, PII, and other applicable obligations. The position leads, coaches, develops, and retains the Information Security team; builds security awareness across the company; and fosters trusted, pragmatic partnerships throughout IntelliScript. The role is open to remote work. Travel to the Brookfield, Wisconsin office as needed and nationwide travel for meetings, conferences, and team events may be required, up to 20%. The expected application deadline is January 31, 2027.

Requirements

10+ years of relevant experience developing and monitoring information security policies and programs, facilitating security governance, conducting ongoing risk assessments, investigating breaches, managing relevant budgets, implementing firewalls, IDS/IPS and SIEM, and driving change management that leads to adherence.
5+ years of related experience managing information security functions and employees.
Extensive experience managing security, risk, and compliance for cloud migrations, cloud-native development, and hybrid environments.
At least one professional certification, such as CISSP, CISM, or GIAC.
In-depth knowledge of information security technologies and architectures and their use to mitigate risks across networks, systems, and data structures.
Work experience in a software or SaaS setting.
Experience working in an Agile software development environment.
Experience in a HIPAA-, PHI-, and PII-compliant environment.
Excellent program and project management skills.
Excellent written and verbal communication skills.
Demonstrated thought leadership in information security and ability to create innovative, scalable business solutions and lead and motivate cross-functional, interdisciplinary teams.
Continuous learner who stays current with security and technology trends.
Demonstrates ownership, urgency, and professionalism.
Coaches, mentors, and motivates others; fosters an inclusive team environment with constructive feedback, recognition, and opportunities for development.
Empowers employees with trust, autonomy, authority, and resources to accomplish goals.
Uses logical, systematic approaches to develop practical solutions to problems.
Verifies important details and ensures required information is complete.
Can address both concrete and abstract matters and evaluate information using proven methods and techniques.
Identifies problems, obstacles, and opportunities and takes action, following through on plans and tasks.
Applies and continually develops the knowledge and skills needed to perform effectively in the role.
Demonstrates a willingness to take on tasks and help others.

Nice To Haves

Bachelor’s degree or advanced degree, such as a master’s degree.
Experience in insurance underwriting, banking, and/or the health industry.
Experience working in SAFe product development environments.
Project management certification, such as PMP.

Responsibilities

Develop and execute a multi-year information security strategy and roadmap aligned with business, technology, product, and client priorities.
Lead the Information Security program, including priorities, governance, operating rhythms, metrics, and accountability.
Lead the information security steering committee and communicate security risks, priorities, investments, and progress to senior leadership.
Develop, maintain, and improve information security policies, standards, controls, and practices.
Lead information security risk management, including identifying, assessing, prioritizing, mitigating, and accepting risks with business and technology leaders.
Translate technical security risks into business terms for executive decision-making and maintain visibility into the organization’s highest security risks.
Lead third-party security risk management and partner with stakeholders on security requirements related to clients, vendors, contracts, and strategic initiatives.
Partner with software engineering, product, infrastructure, and IT teams to embed security throughout the technology lifecycle.
Establish and mature security practices for cloud-native SaaS and hybrid environments.
Oversee vulnerability management, penetration testing, threat monitoring, security testing, and preventive controls.
Assess the security technology portfolio and recommend investments based on risk, effectiveness, scalability, and business needs.
Drive security-by-design practices that support rapid delivery while managing risk.
Maintain incident-response roles, escalation paths, response procedures, and communications; provide leadership during significant security events and apply lessons learned.
Ensure monitoring and capabilities are in place to identify threats, vulnerabilities, breaches, malware, and data leakage.
Maintain a sustainable security and compliance program that supports regulatory, contractual, and client commitments.
Lead security activities supporting SOC and HITRUST certifications.
Partner with privacy, legal, compliance, and technology stakeholders on HIPAA, PHI, PII, and other applicable requirements.
Oversee security audits, assessments, findings, remediation, and evidence management.
Ensure effective responses to customer security due diligence.
Lead, coach, develop, and retain a high-performing Information Security team, creating accountability and supporting professional growth.
Lead company-wide security awareness and education.
Build strong cross-company relationships and position Information Security as a trusted, pragmatic business partner.
Develop security metrics and reporting to help leaders understand risk and make informed decisions.

Benefits

Medical, dental, and vision coverage for employees, dependents, and domestic partners.
Employee Assistance Program for confidential support with personal and work-related challenges.
401(k) plan with company matching and profit-sharing contributions.
Discretionary bonus program.
Flexible Spending Accounts for dependent care, transportation, and eligible medical expenses.
Paid time off accruing from the first day of work; full-time employees accrue 15 days per year, and employees working less than full-time accrue PTO on a prorated basis.
At least 10 paid holidays per year.
Family building benefits, including adoption and fertility assistance.
Up to 11 weeks of paid parental leave for eligible employees.
Life insurance and AD&D, with premiums fully covered by Milliman.
Short-term and long-term disability, fully paid by Milliman.
Skills training, career development, learning opportunities, and mentoring.