Cloud Security Strategy Leader

Highmark Health; Pennsylvania; Hybrid; USD 129,000 - 215,000; Full time

Job summary

Highmark Health seeks an experienced leader to own the Cloud Security program, defining strategy and risk management while enabling secure adoption of cloud, SaaS, and cloud-native technologies. You will guide architecture, engineering, and operations, ensuring compliance with HIPAA, HITRUST, and NIST frameworks.

Responsibilities span threat modeling, security automation, DevSecOps, and secure-by-design initiatives across the cloud lifecycle.

Qualifications

• Bachelor’s degree in Information Security or related field.
• 7-10 years in Information Security / Information Risk Management and/or IT.
• 3-5 years leading cloud security, cybersecurity, engineering, or architecture teams.

Responsibilities

• Plan, organize, staff, direct, and control day-to-day Cloud Security operations.
• Develop and implement cloud security standards, policies, and procedures.
• Lead secure-by-design and DevSecOps initiatives across pipelines and cloud deployments.
• Conduct threat modeling, risk assessments, and security design reviews.
• Provide executive reporting on security metrics and risk to stakeholders.

Skills

Cloud security

Leadership

Risk management

Threat modeling

DevSecOps

Regulatory compliance

CNAPP

Kubernetes security

Education

Bachelor's degree in Information Security or related field

Master’s degree in Computer Science or Information Security (Preferred)

Tools

CNAPP

CSPM

CIEM

IaC security

Kubernetes security

Job description

Highmark Health seeks an experienced leader to own the Cloud Security program, defining strategy and risk management while enabling secure adoption of cloud, SaaS, and cloud-native technologies. You will guide architecture, engineering, and operations, ensuring compliance with HIPAA, HITRUST, and NIST frameworks.

Responsibilities span threat modeling, security automation, DevSecOps, and secure-by-design initiatives across the cloud lifecycle.