Director of Information Security - IntelliScript (Remote)

Milliman•Brookfield, WI

1d•$165,100 - $313,145•Remote

About The Position

The Director of Information Security provides strategic direction for IntelliScript’s company-wide information security program and helps protect its systems, data, and SaaS products. As a member of the Technology leadership team, the Director works with business, product, software engineering, infrastructure, IT, and other leaders to establish security priorities and practices aligned with business needs and industry standards. The role leads the security strategy and program, enterprise security risk management, security operations and incident readiness, compliance and assurance, and the development of a security-minded organization. It includes leading and developing the Information Security team, overseeing security governance and reporting, supporting SOC and HITRUST certifications, and addressing obligations relating to HIPAA, PHI, PII, clients, vendors, and contracts. The position is open to remote work, with travel to the Brookfield, Wisconsin office as needed and nationwide travel for meetings, conferences, and team events up to 20%.

Requirements

10 or more years of relevant experience developing and monitoring information security policies and programs, facilitating information security governance, executing ongoing risk assessments, investigating breaches, managing relevant budgets, implementing firewalls, IDS/IPS, and SIEM, and managing change to promote adherence.
At least 5 years of related experience managing information security functions and employees.
Extensive experience managing security, risk, and compliance in cloud migrations, cloud-native development, and hybrid environments.
At least one professional certification, such as CISSP, CISM, or GIAC.
In-depth knowledge of information security technologies and architectures and how they mitigate risks across networks, systems, and data structures.
Work experience in a software or SaaS setting.
Experience working in an Agile software development environment.
Excellent program and project management skills.
Excellent written and verbal communication skills.
Past experience working in a HIPAA-, PHI-, and PII-compliant environment.
Demonstrated thought leadership in information security and ability to create innovative, scalable business solutions and lead and motivate cross-functional, interdisciplinary teams.
Ability to stay current with security and technology trends.
Demonstrated ownership, urgency, and professionalism; ability to coach, mentor, motivate, empower, and develop others.
Ability to approach problems systematically, verify important details, evaluate information using proven methods, and follow through on plans and solutions.
Willingness to travel to the Milliman office in Brookfield, Wisconsin as needed and nationwide for meetings, conferences, and team events up to 20%.

Nice To Haves

Bachelor’s degree or advanced degree.
Experience in insurance underwriting, banking, or the health industry.
Experience working in SAFe product development environments.
Project management certification, such as PMP.

Responsibilities

Develop and execute a multi-year information security strategy and roadmap aligned with business, technology, product, and client priorities.
Lead the Information Security program, including priorities, governance, operating rhythms, metrics, and accountability.
Lead the information security steering committee and communicate risks, priorities, investments, and progress to senior leadership.
Develop, maintain, and improve information security policies, standards, controls, and practices.
Lead the information security risk-management program, including identifying, assessing, prioritizing, mitigating, and accepting risks with business and technology leaders.
Maintain visibility into key security risks and explain technical risks in business terms for executive decision-making.
Lead third-party security risk management and work with stakeholders on security requirements for clients, vendors, contracts, and strategic initiatives.
Partner with software engineering, product, infrastructure, and IT teams to embed security throughout the technology lifecycle.
Establish and mature security practices for cloud-native, SaaS, and hybrid environments.
Oversee vulnerability management, penetration testing, threat monitoring, security testing, and preventative controls.
Assess the security technology portfolio and recommend investments based on risk, effectiveness, scalability, and business needs.
Drive security-by-design practices that support team velocity while managing risk.
Maintain an incident-response program with defined roles, escalation paths, procedures, and communications.
Provide leadership during significant security events and ensure lessons learned lead to stronger controls and practices.
Ensure monitoring and capabilities exist to identify threats, vulnerabilities, breaches, malware, and data leakage.
Maintain a sustainable security and compliance program supporting regulatory, contractual, and client commitments.
Lead security activities supporting SOC and HITRUST certifications.
Partner with privacy, legal, compliance, and technology stakeholders on HIPAA, PHI, PII, and other applicable requirements.
Oversee security audits, assessments, findings, remediation, and evidence management.
Ensure effective responses to customer security due diligence.
Lead, coach, develop, and retain a high-performing Information Security team, establishing accountability and supporting professional growth.
Lead company-wide security awareness and education.
Build trusted, pragmatic relationships across IntelliScript and develop security metrics and reporting for leadership.
Manage relevant security budgets and implement change-management approaches that promote adherence.

Benefits

Medical, dental, and vision coverage for employees, dependents, and domestic partners.
Employee Assistance Program (EAP).
401(k) plan with company matching and profit-sharing contributions.
Discretionary bonus program.
Flexible Spending Accounts for dependent care, transportation, and eligible medical expenses.
Paid time off accruing from the first day of work; full-time employees accrue 15 days per year.
At least 10 paid holidays per year.
Adoption and fertility assistance.
Up to 11 weeks of paid parental leave for eligible employees.
Life insurance and AD&D premiums fully covered by Milliman.
Short-term and long-term disability coverage fully paid by Milliman.
Skills training, career development, learning, and mentoring opportunities.