Job Description
We offer remote work opportunities (AK, AR, AZ, CA, *CO, FL, *HI, IA, ID, IL, KS, LA, MD, MN, MO, MT, NE, NV, NM, NC, ND, OK, OR, SC, SD, TX, UT, VA/DC, *WA, WI & WY only). Please note if you are not located in the Phoenix area, you may need to travel to our Corporate Office in Phoenix, Arizona. Veterans, Reservists, Guardsmen and military family members are encouraged to apply! Job Summary
The Director of Information Security is responsible for directing and supporting the development of TriWest’s information security program. . The Director of Information Security will acquire and manage the necessary resources, including leadership support, financial resources, and key security personnel, to support information technology (IT) security goals and objectives and reduce overall TriWest risk. The Director of Information Security will support the development and implementation of information security programs, policies, and procedures, including successful implementations for TriWest. The Director of Information Security works closely with other leaders within TriWest to develop and implement information security strategies that align with TriWest’s goals and objectives. Education & Experience Required: • Bachelor’s degree in computer science, IT security or related degree or equivalent experience • U.S. Citizenship • Must be able to receive a favorable Interim and adjudicated final Department of Defense (DoD) background investigation • 5+ years of progressively responsible management experience leading IT security teams • 10+ years of experience in cybersecurity and information technology administration • Experience in managing a National Institute of Standards and Technology (NIST), Federal Information Security Modernization Act (FISMA) security environment, and obtaining and maintaining ongoing authorizations • Experience integrating controls and practices based on NIST 800 series publications • Familiar with FedRAMP security framework and requirements • Familiar with STIG configuration standards and implementation of STIG mandated configurations • Familiar with the Federal Information Security Modernization Act (FISMA) Eligible to hold Department of Defense security clearance Preferred: • A background in information security or a related field and certification in information security (e.g., CISSP) • Skills in Virtual Private Network (VPN) devices and encryption • Sills in using Public-Key Infrastructure (PKI) encryption and digital signature capabilities into applications • Ability to interpret Communications Security (COMSEC) • Knowledge of laws, policies, procedures, or governance relevant to cybersecurity Key Responsibilities • Responsible for the cybersecurity of a program, organization, system, or enclave. • Assure successful implementation and functionality of security requirements and appropriate information technology (IT) policies and procedures that are consistent with TriWest’s missions and goals. • Advise senior management (e.g., Chief Information Security Officer, CISO) on cost/benefit analysis of information security programs, policies, systems, elements, and risk levels/security posture. • Ensure cybersecurity requirements are integrated into the continuity planning for the system and TriWest. • Ensure cybersecurity inspections, tests, and reviews are coordinated for the network environment. • Monitor IT security program implications of new technology or technology upgrades. • Oversee the information security training and awareness programs. • Provide system-related input on cybersecurity requirements to be included in statements of work and other appropriate procurement documents. • Use federal and TriWest specific published documents to manage operations of computing environment systems. • Develop and implement information security strategies that align with TriWest’s overall goals and objectives. This may involve identifying key information security metrics, developing information security policies and procedures, and implementing programs to improve information security for TriWest. • Oversee the day-to-day operations of the information security department, including managing staff, ensuring compliance with regulatory requirements, and implementing process improvements. • Conduct risk assessments to identify potential security threats and vulnerabilities to TriWest’s information assets. Based on the results of the assessments, they develop risk mitigation strategies to protect TriWest from these threats. • Develop incident response plans to address security incidents, including data breaches or cyber-attacks. They also conduct regular drills to ensure that TriWest is prepared to respond to these incidents. .: • Collaborate with other internal teams, including IT, legal, and compliance, to ensure that the information security program is consistent with other organizational goals and objectives. • Manage relationships with third-party vendors who support the information security program, such as security software vendors or managed security service providers. • Ensure that the information security program complies with all regulatory requirements, including those related to data privacy and security. Competencies Coaching / Training / Mentoring: Actively foster actions required for desired business outcomes through ongoing constructive feedback.Communication / People Skills: Excellent verbal, written, and presentation skills; ability to influence or persuade others under positive or negative circumstances; adapt to different styles; listen critically; collaborate.Computer Literacy: Ability to function in a multi-system Microsoft environment using Word, Outlook, TriWest Intranet, the Internet, and department software applications.Independent Thinking / Self-Initiative: Critical thinkers with ability to focus on things which matter most to achieving outcomes; commitment to task to produce outcomes without direction and to find necessary resources.Leadership: Successfully manage different styles of employees; provide clear direction and effective coaching.Multi-Tasking / Time Management: Prioritize and manage actions to meet changing deadlines and requirements within a high volume, high stress environment.Organizational Skills: Ability to organize people or tasks, adjust to priorities, learn systems, within time constraints and with available resources; detail-oriented.Problem Solving / Analysis: Ability to solve problems through systematic analysis of processes with sound judgment; has a realistic understanding of relevant issues.Team-Building / Team Player: Influence the actions and opinions of others in a positive direction and build group commitment.Working Conditions Working Conditions: • Availability to work non-regular hours as required • Onsite: Works within a standard office environment • Remote: Private and secure work space and work station with high speed internet is required • Extensive computer work with long periods of sitting *Annual base salary for Colorado, Hawaii and Washington State residents: Approx. $206,000 depending on experience*Our Department of Defense contract requires US citizenship and a favorably adjudicated DOD background investigation for this position.
