Head of Cyber Security Operations & Incident Response

Wellmark; Des Moines, Northern (IA, KY); Hybrid; USD 120,000 - 190,000; Full time

Job summary

Wellmark is seeking a senior leader to run its Cyber Security Operations, shaping strategy and policies in line with HIPAA, NIST, and industry best practices. You will oversee security services, incident response, vulnerability management, and threat intelligence to protect member data across the enterprise.

The role requires 7+ years in security with strong leadership, cloud security expertise, and excellent communication skills.

Qualifications

• Bachelor's degree or equivalent experience (4 years).
• One or more certifications: CISSP, CISM, CRISC, CCSP, CISA, CISSP-ISSMP.
• Minimum 7 years designing and delivering security solutions including 5+ years security management, 4+ years implementing controls.
• Deep technical cyber security expertise including extensive cloud (PaaS) security.
• Proven ability to lead high-performing teams and drive strategy.
• Strong communication, influence, and relationship-building skills.

Responsibilities

• Provide operational leadership of Wellmark's Cyber Security Operations department.
• Collaborate to develop and implement security policies, standards, and processes aligned with regulatory requirements.
• Lead change efforts resulting from cyber security strategy and policy updates.
• Partner with leadership to ensure effective operation of security services.
• Oversee incident management, vulnerability management, and threat intelligence capabilities.
• Develop insider threat program and security awareness training.
• Lead SOC operations with 24x7x365 coverage.

Skills

Cyber Security Leadership

Security Operations

Cloud Security (PaaS)

Risk Assessment & Mitigation

Strategic Planning

Strong Communication

Change Management

Regulatory Compliance (HIPAA, NIST)

Education

Bachelor's degree or equivalent experience

Tools

CISSP

CISM

CRISC

CCSP

CISA

Job description

Wellmark is seeking a senior leader to run its Cyber Security Operations, shaping strategy and policies in line with HIPAA, NIST, and industry best practices. You will oversee security services, incident response, vulnerability management, and threat intelligence to protect member data across the enterprise.

The role requires 7+ years in security with strong leadership, cloud security expertise, and excellent communication skills.