Director of Information Security - IntelliScript (Remote)

What We DoMilliman IntelliScript is a group of a few hundred experts in fields ranging from actuarial science to information technology to clinical practice. Together, we develop and deploy category-defining, data-driven, software-as-a-service (SaaS) products for a broad spectrum of insurance, health IT and life sciences clients. We are a business unit within Milliman, Inc., a respected consultancy with offices around the world.Candidates who have their pick of jobs are drawn to IntelliScript’s entrepreneurial and collaborative culture of innovation, excellence, exceptional customer service, balance, and transparency. Every single person has a voice in our company, and we challenge each other to push the outer limits of our full, diverse potential. And, we’ve shown sustained growth that ensures you’ll have room to grow your skillset, responsibilities, and career.Our team is smart, down-to-earth, and ready to listen to your best ideas. We reward excellence and offer competitive compensation and benefits. Visit our LinkedIn page for a closer look at our company, and learn more about our cultural values here.Milliman invests in skills training and career development and gives all employees access to a variety of learning and mentoring opportunities. Our growing number of Milliman Employee Resource Groups (ERGs) are employee-led communities that influence policy decisions, develop future leaders, and amplify the voices of their constituents. We encourage our employees to give back to their varied professions, including leadership in professional organizations. Please visit our website to learn more about Milliman’s commitments to our people, diversity and inclusion, social impact, and sustainability.What this position entailsThe Director of Information Security will hold a role that is crucial to the continued success of our business. To meet the high expectations that we (and our clients) have of our systems and data, we are seeking a proven leader to provide the strategic direction and integrity of our company-wide InfoSec program, based upon sound knowledge of our business operations and industry standards of excellence.The Director of Information Security will coordinate the development, maintenance, enhancement, and execution of best practices. Leveraging their knowledge of cyber security industry trends and standards of excellence, they will lead change and drive results across long-term projects and short-term tactical problem solving. As a part of our Technology leadership team, you will work closely with other leaders to ensure the security of all aspects of Information Technology and data security as we continue to develop innovative SaaS solutions. What you will be doingLead IntelliScript's security strategy and programDevelop and execute a multi-year information security strategy and roadmap aligned with IntelliScript's business, technology, product, and client priorities.Lead the overall Information Security program, establishing priorities, operating rhythms, governance, metrics, and accountability.Lead IntelliScript's information security steering committee and communicate security risks, priorities, investments, and progress to senior leadership.Develop, maintain, and continuously improve information security policies, standards, controls, and practices.Own enterprise security riskLead IntelliScript's information security risk-management program, partnering with business and technology leaders to identify, assess, prioritize, mitigate, and appropriately accept risk.Maintain a clear view of IntelliScript's highest security risks and translate technical risks into business terms that enable effective executive decision-making.Lead third-party security risk management and ensure vendors and partners meet appropriate security expectations.Partner with stakeholders on security requirements associated with clients, vendors, contracts, and strategic initiatives.Protect our technology and productsPartner deeply with software engineering, product, infrastructure, and IT teams to embed security throughout the technology lifecycle.Establish and mature security practices appropriate to cloud-native, SaaS, and hybrid environments.Oversee vulnerability management, penetration testing, threat monitoring, security testing, and preventative controls.Assess the security technology portfolio and recommend investments based on risk, effectiveness, scalability, and business need.Drive security-by-design practices that allow teams to move quickly without creating unacceptable risk.Lead security operations and incident readinessMaintain an effective incident-response program with clearly established roles, escalation paths, response procedures, and communications.Provide leadership during significant security events and ensure lessons learned translate into stronger controls and practices.Ensure appropriate monitoring and capabilities exist to identify threats, vulnerabilities, breaches, malware, and data leakage.Lead compliance and assuranceMaintain a sustainable security and compliance program supporting IntelliScript's regulatory, contractual, and client commitments.Lead security activities supporting SOC and HITRUST certifications.Partner with stakeholders responsible for privacy, legal, compliance, and technology to address requirements involving HIPAA, PHI, PII, and other applicable obligations.Oversee security audits, assessments, findings, remediation, and evidence-management processes.Ensure IntelliScript can respond effectively and credibly to customer security due diligence.Build a security-minded organizationLead, coach, develop, and retain a high-performing Information Security team.Create clear accountability while empowering team members to own outcomes and grow professionally.Lead company-wide security awareness and education.Build strong relationships across IntelliScript and make Information Security a trusted, pragmatic partner to the business.Develop security metrics and reporting that help leaders understand risk and make informed decisions.What we need10+ years of relevant experience:Developing and monitoring information security policies and programsFacilitating information security governanceExecuting ongoing risk assessment processesInvestigating breachesManaging relevant budgetsImplementing firewalls, IDS/IPS, SIEMChange management via methods that lead to adherence5+ years of related experience managing information security functions and employeesExtensive experience managing security, risk, and compliance elements of cloud migrations, cloud native development and hybrid environmentsAt least one professional certification (CISSP, CISM, GIAC, etc.)In-depth knowledge of information security technologies and architectures, and their applications, to mitigate environmental risks within the network, systems, and data structuresContinuous learner that stays on top of the latest trends in security and technologyDemonstrated thought leadership in information security and creating innovative, scalable business solutions with the ability to lead and motivate cross-functional, interdisciplinary teamsWork experience in a software / SaaS settingExperience working in Agile software development environmentExcellent program and project management skillsExcellent written and verbal communication skillsPast experience working in a HIPAA, PHI, and PII compliant environment What you bring to the table Demonstrates ownership, urgency, and professionalismCoaches, mentors and motivates others to meet the organization’s goals; provides an inclusive and positive team environment that fosters positive and constructive feedback, recognition, leadership, and personal and professional developmentConvey confidence in employees' ability to be successful; allowing employees freedom to decide how they will accomplish their goals; provides authority and resourcesAbility to tackle a problem by using a logical, systematic, sequential approach to generate sensible, realistic, practical solutions to problemsVerifies important details, ensures there are no surprises or gaps in needed informationDeals effectively not just with concrete, tangible issues but with abstract, conceptual mattersDemonstrates the ability to evaluate information using a variety of proven methods and techniquesIdentifies a problem, obstacle or opportunity and takes appropriate action to address current or future problems or opportunities; begins and follows through with a plan or taskApplication of knowledge and skills needed to perform effectively in a specific job or group of jobs within the organization. Loves to learn, takes every opportunity they’re given to develop knowledge and skillsDemonstrated “let’s find a way to do it” attitude – no task is too big or too small, always willing to pitch in and help someone elseWish listBachelor’s degree or advanced degree (Master’s, etc.)Experience in insurance underwriting, banking, and/or health industryExperience working in SAFe product development environmentsProject management certification (PMP, etc.) Location The expected application deadline for this job is January 31, 2027. This position is open to remote work Applicants must be willing to travel to the Milliman office in Brookfield, WI as needed and travel nationwide for meetings, conferences, and team events up to 20%.CompensationThe overall salary range for this role is $165,100 - $313,145. For candidates residing in:Alaska, California, Connecticut, Illinois, Maryland, Massachusetts, New Jersey, New York City, Pennsylvania, Virginia, Washington, or the District of Columbia the range is $189,865 - $313,145.All other locations the range is $165,100 - $272,300.A combination of factors will be considered, including, but not limited to, education, relevant work experience, qualifications, skills, certifications, etc. Milliman BenefitsWe offer a comprehensive benefits package designed to support employees’ health, financial security, and well-being. Benefits include:Medical, Dental and Vision – Coverage for employees, dependents, and domestic partnersEmployee Assistance Program (EAP) – Confidential support for personal and work-related challenges401(k) Plan – Includes a company matching program and profit-sharing contributionsDiscretionary Bonus Program – Recognizing employee contributionsFlexible Spending Accounts (FSA) – Pre-tax savings for dependent care, transportation, and eligible medical expensesPaid Time Off (PTO) – Begins accruing on the first day of work. Full-time employees accrue 15 days per year, and employees working less than full-time accrue PTO on a prorated basisHolidays – A minimum of 10 paid holidays per yearFamily Building Benefits – Includes adoption and fertility assistancePaid Parental Leave – Up to 11 weeks of paid leave for employees who meet eligibility criteriaLife Insurance & AD&D – 100% of premiums covered by MillimanShort-Term and Long-Term Disability – Fully paid by MillimanEqual Opportunity All qualified applicants will receive consideration for employment, without regard to race, color, religion, sex, sexual orientation, national origin, disability, or status as a protected veteran. #IntelliScript #LI-REMOTE #LI-LA1Job SummaryRequisition Number: DIREC010792Job Category: Information TechnologySchedule: Full-Time