Director - Cyber Security Operations

Company Description Why Wellmark:
We are a mutual insurance company owned by our policy holders across Iowa and South Dakota, and we’ve built our reputation on over 80 years’ worth of trust. We are not motivated by profits. We are motivated by the well-being of our friends, family, and neighbors–our members. If you’re passionate about joining an organization working hard to put its members first, to provide best-in-class service, and one that is committed to sustainability and innovation, consider applying today!

Why Wellmark Technology? Wellmark is building innovative, modern solutions using cutting edge technology. We are driving organizational transformation and business strategy by empowering our technology team to innovate new and elegant solutions to enhance the customer experience. Together, we are leaning into the future, owning the outcome, and driving organizational change to transform how we work.

Job Description Provide operational leadership of Wellmark’s Cyber Security Operations department and related disciplines. Collaborate across the organization toward the strategic development and implementation of cyber security policies, standards, and processes aligned to leading industry practices as well as HIPAA, NIST, BCBSA, and all applicable regulatory requirements. Lead domain-specific change efforts resulting from cyber security strategy and policy updates and recommend/implement control changes in response to emerging risks.

Partner with departmental leadership and staff to ensure the effective operation of security services that foster enterprise-wide understanding and support of the Corporate Information Security Program.

Qualifications

Required:

Bachelor’s degree or equivalent experience (4 years).One or more certifications: CISSP, CISM, CRISC, CCSP, CISA, CISSP-ISSMP.Minimum 7 years’ experience designing and delivering security solutions, including 5+ years security management, 4+ years implementing security controls, experience in risk identification, analysis, and mitigation, and 3+ years shaping security structure and direction at an organizational or discipline level.

Deep technical cyber security expertise that includes extensive cloud (PaaS) security experience.

Demonstrated ability to lead high-performing teams that deliver results.

Strong communication, influence, and relationship-building skills.

Proven ability to set strategy and drive tactical execution.

Experience leading through change and resolving complex problems.

Strong decision-making and critical-thinking skills.

Knowledge of existing and emerging technologies.

Preferred:

Master’s degree.

Additional Informationa. Provide strategic direction to a team of individual contributors and leaders to support enterprise goals; communicate strategy and priorities across the team. Oversee daily management of financial and human resources, including coaching, performance development, and departmental budgeting.b. Lead and continuously improve the Cyber Incident Management process using NIST and other cyber-industry best practices. Coordinate response to cyber-security incidents; advise leaders on risk remediation and process improvement plans.

Oversee cyber-forensics staff and their use of operational practices that ensure legal defensibility and proper chain-of-custody standards. Establish risk-based incident metrics and reporting.c. Develop and maintain the insider threat management program, including user activity monitoring and anomalous behavior detection. Set operational rules enabling rapid detection without impacting member service.d. Lead a best-in-class security awareness program from onboarding through annual training and ad-hoc education.

Lead and participate in the development of clear, practical cyber…