Director of Information Security (SaaS)

Location: Remote within the United States; willingness to travel to the hirify.global office in Brookfield, Wisconsin as needed and travel nationwide for meetings, conferences, and team events up to 20%

Salary: $165,100–$313,145 annually; $189,865–$313,145 in Alaska, California, Connecticut, Illinois, Maryland, Massachusetts, New Jersey, New York City, Pennsylvania, Virginia, Washington, and the District of Columbia; $165,100–$272,300 in all other locations

Company

hirify.global IntelliScript develops and deploys data-driven SaaS products for insurance, health IT, and life sciences clients as a business unit of hirify.global.

What you will do

• Develop and execute a multi-year information security strategy, roadmap, governance model, metrics, policies, standards, controls, and operating practices.
• Lead enterprise security risk management, including risk assessment, mitigation and acceptance, third-party risk, vendor security, and executive risk reporting.
• Embed security across software engineering, product, infrastructure, and IT while maturing practices for cloud-native, SaaS, and hybrid environments.
• Oversee vulnerability management, penetration testing, threat monitoring, security testing, preventative controls, and security technology investments.
• Lead incident response, breach readiness, security monitoring, compliance activities, SOC and HITRUST certification support, audits, assessments, remediation, and customer security due diligence.
• Lead, coach, develop, and retain the Information Security team while driving company-wide security awareness and education.

Requirements

• 10+ years of relevant experience developing and monitoring information security policies and programs, facilitating governance, executing risk assessments, investigating breaches, managing budgets, implementing firewalls, IDS/IPS, and SIEM, and driving change adoption.
• 5+ years of experience managing information security functions and employees.
• Extensive experience managing security, risk, and compliance for cloud migrations, cloud-native development, and hybrid environments.
• At least one professional certification such as CISSP, CISM, or GIAC.
• In-depth knowledge of information security technologies, architectures, and their application to network, systems, and data risks.
• Demonstrated information security thought leadership, innovative and scalable business solutions, and the ability to lead and motivate cross-functional, interdisciplinary teams.
• Work experience in a software or SaaS setting and in an Agile software development environment.
• Excellent program and project management, written communication, and verbal communication skills.
• Past experience working in a HIPAA, PHI, and PII compliant environment; continuous learning and staying current with security and technology trends.

Nice to have

• Bachelor’s or advanced degree.
• Experience in insurance underwriting, banking, and/or the health industry.
• Experience in SAFe product development environments.
• Project management certification such as PMP.

Culture & Benefits

• Entrepreneurial, collaborative culture focused on innovation, excellence, customer service, balance, transparency, and inclusion.
• Remote work with travel to the Brookfield office and nationwide travel for meetings, conferences, and team events up to 20%.
• Medical, dental, and vision coverage; employee assistance; life insurance; and fully paid short- and long-term disability coverage.
• 401(k) matching and profit-sharing contributions, flexible spending accounts, discretionary bonus program, and paid holidays.
• Paid time off, up to 11 weeks of paid parental leave for eligible employees, and family-building benefits.
• Skills training, career development, learning and mentoring opportunities, and employee resource groups.