Chief Information Security Officer

Network Health Administrative Services, LLC; Menasha (WI); Hybrid; USD 150,000 - 210,000; Full time

Job summary

Network Health Administrative Services, LLC is seeking a Chief Information Security Officer (CISO) to lead the information security program and report to the CIO. The role requires extensive IT leadership, risk management, and regulatory awareness within a Wisconsin health plan context.

Location options include a home office, Brookfield or Menasha offices, or a hybrid arrangement. Primary responsibilities include incident response leadership, policy development, security governance, and

Qualifications

• Bachelor’s degree in MIS, engineering or closely related field.
• 10 years’ experience in senior IT roles.
• 10 years’ experience and knowledge of the Health Plan business.
• 3+ years’ experience in a leadership position.
• CISA, CISM or CISSP or ability to obtain within one year in the position.

Responsibilities

• Lead the incident response team (IRT) and collaborate with compliance and legal as appropriate.
• Define, develop, and implement risk management structures, strategies, and policies to reduce risk and defend against attacks.
• Govern, evaluate, and respond to risks involving protected data; ensure information systems comply with security policies.
• Identify current and future security challenges and equip the organization with tools, skills, and resources to protect against risks.
• Determine information security policies and strategies aligned with business objectives.
• Provide senior technical leadership to IT and the enterprise and align with future system directions.
• Manage IDS architectures, firewall architectures, incident response, forensics, and secure messaging architectures.
• Oversee development and enforcement of information security standards and procedures.
• Conduct threat and vulnerability assessments as appropriate within the organization.
• Oversee investigation of data security breaches and internal communications.
• Develop and champion the corporate security awareness program.

Skills

Incident response leadership

Risk management

Information security

Policy development

Security governance

Technical leadership

Education

Bachelor’s degree in MIS / engineering or related field

CISA / CISM / CISSP or eligible to obtain within 1 year

Tools

IDS

Firewall architectures

Forensics

Security standards & procedures

Job description

The Chief Information Security Officer (CISO) is a director level role responsible for establishing and maintaining the information security program to ensure that information assets and associated technology, applications, systems, infrastructure and processes are adequately protected in the digital ecosystem in which we operate. The CISO is responsible for identifying, evaluating and reporting on legal and regulatory, IT, and cybersecurity risk to information assets, while supporting and advancing business objectives. This role reports to the Chief Information Officer.

Location: Candidates must reside in the state of Wisconsin for consideration. This position is eligible to work at your home office (reliable internet is required), at our office in Brookfield or Menasha, or a combination of both in our hybrid workplace model.

Hours: 1.0 FTE, 40 hours per week, 8am-5pm Monday through Friday

Job Responsibilities:

• A key leader of the incident response team (IRT). Collaborates with compliance and legal departments as appropriate regarding the incident
• Define, develop, and implement risk management structures, strategies, and policies to reduce risk and to prevent and defend against information security attacks
• Govern, evaluate, and respond to risks involving the organization's protected data and interests; assure all information systems concerning security policies are operating correctly and compliantly
• Recognize the security challenges in the current and future state of business operations; provide the organization with the right tools, skills, resources, relationships, and capabilities to protect against growing information security risks
• Determine information security policies and strategies; structure security initiatives with security programs and business objectives
• Provide senior technical leadership to IT and the enterprise including being conversant with the future direction of systems, how that direction will impact the enterprise, and how future and current systems can be exploited for the benefit of the enterprise
• Manages intrusion detection services (IDS) architectures including enterprise-scale firewall architectures, disruption investigation and forensics methods and technologies, secure messaging architectures, cyber security controls, and distributed computing platforms
• Oversee the development, implementation, and enforcement of information security standards and procedures
• Conduct threat and vulnerability assessments as appropriate within the organization
• Oversee the investigation of data security breaches, including internal communications
• Develop and champion the corporate security awareness program

Job Requirements:

• Bachelor’s degree in MIS, engineering or closely related field required.
• 10 years’ experience in senior IT roles required
• 10 years’ experience and knowledge of the Health Plan business required
• 3+ years’ experience in a leadership position
• CISA, CISM or CISSP or ability to obtain within one year in the position

Network Health is an Equal Opportunity Employer

Equal Opportunity Employer
This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.