Security Lead (Cybersecurity)

TL;DR

Security Lead (Cybersecurity): Establishing and overseeing the cybersecurity, privacy, and compliance posture for a CMS case management program with an accent on federal standards and cloud security. Focus on managing ATO activities, implementing Zero Trust principles, and embedding security controls into CI/CD pipelines.

Location: Must be based in the US (Open to remote candidates in: AZ, AR, DE, FL, GA, IL, IN, KS, KY, MA, MD, MI, MS, MO, MT, NC, NE, NV, NY, OH, OK, PA, SC, TN, TX, VA, DC, WI, and WV)

Salary: $150,000–$155,000

Company

A data-centric transformation company enhancing healthcare outcomes through quality data solutions and clinical expertise.

What you will do

• Lead cybersecurity strategy ensuring compliance with CMS ARS, FISMA, HIPAA/HITECH, NIST 800-53, and FedRAMP.
• Manage Authority to Operate (ATO) activities and coordinate with government security officials and auditors.
• Review and approve AWS cloud architecture to ensure secure implementation of cloud-native services.
• Implement automated scanning for source code, containers, Kubernetes workloads, and Infrastructure as Code (IaC).
• Define data classification, handling, and retention requirements to protect PII and PHI.
• Develop incident response procedures and support SIEM-based monitoring and alerting strategies.

Requirements

• Bachelor's degree in Cybersecurity, Information Systems, or Computer Science (Master's preferred).
• 10+ years of cybersecurity experience, including 5+ years supporting federal government programs.
• 5+ years of experience securing AWS cloud-based solutions.
• Experience with healthcare or CMS-related systems and ATO processes.
• Experience leading security teams in Agile and DevSecOps environments.
• Must be located in one of the approved US states.

Nice to have

• Certifications: CISSP, CCSP, AWS Certified Security – Specialty, CISM, CEH, or GIAC.

Culture & Benefits

• Purpose-driven culture with a focus on straightforward communication and clinical expertise.
• Flexible work environment offering both office and remote options.
• Commitment to equal employment opportunities and merit-based processes.