Remote Director of Information Security & Risk Strategy

Milliman, Inc; Town of Brookfield (WI); Remote; USD 165,000 - 313,000; Full time

Benefits offered by this job

Medical, Dental and Vision

401(k) Plan

Paid Time Off

Holidays

Life Insurance

Discretionary Bonus

Job summary

Milliman IntelliScript seeks a Director of Information Security to drive the strategy, governance, and execution of the company-wide InfoSec program for its SaaS platforms in the health and insurance space. You will partner with IT, product, and engineering to embed security by design across cloud-native and hybrid environments.

You will own risk management, security operations, and compliance, coordinate with executives, and guide security policies, controls, and audits to protect client data

Qualifications

• 10+ years of relevant experience developing information security policies and programs.
• 5+ years of related experience managing information security functions and employees.
• Professional certification (CISSP, CISM, GIAC, etc.).
• Experience in cloud migrations, cloud-native development, and hybrid environments.
• Experience in HIPAA, PHI, and PII compliant environments.

Responsibilities

• Lead security strategy and multi-year information security roadmap.
• Own enterprise security risk management and governance.
• Protect technology and products; embed security across lifecycle.
• Lead security operations, incident readiness, and response.
• Oversee security compliance, audits, and evidence management.
• Build and mentor a high-performing Information Security team.

Skills

Security leadership

Risk management

Incident response

Cloud security

SOC/HITRUST

HIPAA/PHI/PII

Security governance

Vulnerability management

Project management

Communication skills

Agile

Education

Bachelor's degree

Tools

SIEM

Firewalls/IDS/IPS

Job description

Milliman IntelliScript seeks a Director of Information Security to drive the strategy, governance, and execution of the company-wide InfoSec program for its SaaS platforms in the health and insurance space. You will partner with IT, product, and engineering to embed security by design across cloud-native and hybrid environments.

You will own risk management, security operations, and compliance, coordinate with executives, and guide security policies, controls, and audits to protect client data