Director, Information Security

The range for this role is $136,000 - $196,500

Actual base pay will be determined based on a successful candidate's work location, skills/abilities, experience, and education.

Interested applicants must be willing and able to work onsite full-time in either our Orlando, FL or Melbourne, FL office.

The Mission

At Christian Care Ministry we believe that Christians can, and should, share in one another's burdens. Through the use of Medi-Share®, a healthcare sharing ministry for Christians, we cultivate that belief. To that end, our Mission Statement is as follows: Connecting people to a Christ-centered community wellness experience based on faith, prayer, and personal responsibility.

The Team

Everyone at Christian Care Ministry is in agreement with our Statement of Faith, which outlines our core beliefs. Although we aren't perfect people, we are serving our perfect God and our Members to the best of our ability.

The Job

The Director, Information Security will lead the vision, strategy, and execution of a comprehensive security program for Christian Care Ministry (CCM), that safeguards a complex, hybrid technology environment while enabling innovation across the organization. This position will play a pivotal role in shaping secure AI adoption across the organization -including Agentic AI-and advising executive leadership and the Board on risk, compliance, and emerging threats. This role will partner closely with key stakeholders across the organization, not just IT leadership, and provides a unique opportunity to blend strategic influence while not losing the daily, hands-on skillset. CCM desires to build a culture of security excellence, and this role affords the challenge to build, lead, and modernize a mission-driven security function within a faith-based organization.

Essential Job Duties & Responsibilities

• Develop and maintain IT Security Roadmap, including timelines and budgets
• Lead the IT Security plans for Artificial Intelligence, including Agentic AI for software development and business process automation
• Provide IT Security expertise for, and actively participate in, the AI Oversight Committee
• Plan, design, develop, and implement Information Security policies and practices across all aspects of the company's hybrid infrastructure environment using common security tools
• Lead team of Information Security professionals to drive vision, goals, and objectives including managing staffing, performance, and budgets
• Maintain IT Compliance and Information Security framework, information security and risk management policies, standards, and guidelines
• Conduct regular security monitoring and reporting to ensure adequate security defenses, systems, and settings are in place to protect against intrusion, theft, destruction, or misuse of company information
• Coordinate and execute proactive information security consulting to the business and IT teams covering cyber security, management of electronic data, network architecture, and access management
• Lead security incident response process
• Strictly adhere to, and enforce system security policies and follow all company standards. Must comply with applicable laws and regulations, including but not limited to: banking laws, PCI/PHI, and HIPAA regulations
• Monitor internal control systems to ensure that appropriate information access levels are maintained. Perform security audits on software, networks, and hybrid environments (on-premises, public cloud, private cloud, SaaS)
• Perform information security risk analysis and periodic information system activity reviews for information security processes
• Develop and maintain an executive scorecard based on IT organization OKRs for IT Security
• Lead all IT Security audit responses, management responses, and action plans
• Provide input (Board-ready) to CIO for Board presentations
• Contribute to the exercise and expression of Christian Care Ministry's Christian beliefs
• All other duties as assigned

Essential Skills & Abilities

• Ability to work as part of a multidisciplinary team and collaborate with those in different disciplines
• Advanced skill in administering data security programs
• Advanced skill in disaster recovery planning
• High level of interpersonal and verbal communication skills
• Knowledge with security implications of cloud-based information systems and experience driving transformational change within cloud-based, secure environments with control systems
• Experience working with the security needs and compliance requirements of financial and healthcare institutions
• Demonstrated experience in deploying and operating the following tools: CrowdStrike, Knowbe4, Qualys, Rapid7, Orca, ThreatLocker, Thycotic, Trend Micro Email Security, Directory Synchronization Tool, Trend Micro Full Disk Encryption, Pentera, Immersive Labs, or equivalent
• Ability to deal effectively with problems involving several variables
• Leadership skill - ability to coach, train, manage performance, budget plan, and manage staffing in a way that contributes to a high performing and cohesive team

Core Competencies/Demonstrable Behaviors

• Courage - ability to have tough conversations and deliver accurate advice and decisions regardless of risk or potential criticism
• Tech Savvy - anticipates and adopts innovations in business-building digital and technology applications
• Member First - exhibits full commitment to serving members and/or clients by prioritizing their needs first in alignment with our program's purpose. This commitment is demonstrated through understanding of the program(s), provided through quality and timely service while exercising empathy in every interaction. Every CCM employee shares responsibility to steward resources faithfully, removing barriers to understanding, and creating accessible, connected, and Christ-centered experiences.
• Humble - demonstrates Christ-Centered humility by honoring others, accepting feedback, and prioritizing collective success over individual recognition
• Hungry - exhibits initiative, perseverance, and commitment to serving God through excellence. Demonstrates passion for personal and organizational growth while diligently advancing the mission of Christian Care Ministry
• Smart - shows relational and emotional intelligence, communicates effectively, collaborates harmoniously, and reads social cues with grace and discernment

Education and/or Experience

• Bachelor's degree in Computer Science, Information Systems, Cyber Security or closely related field with 8+ years of progressive experience required, preferably in a healthcare payer or financial services organization of similar size or larger.
• 5+ years' experience working with IT guidelines and requirements compliant with at least two of the following - HIPAA, PCI-DSS, HITRUST, SOC 1/2/3 required
• Prior supervisory experience leading IT security professionals required

Supervisory Responsibilities

• This job has supervisory responsibilities

Incentives & Benefits

We work hard to serve our Medi-Share Members, but know we can only do that if we invest in our employees professionally, financially, physically, socially, and spiritually. We purposefully invest in our employees so that our employees can invest in others.

For full-time employees working 30 hours or more, some of our benefits include, but are not limited to:

• 100% paid Medical for employees/99% for family
• Generous employer Health Savings Account (HSA) contributions
• Employer-paid Life Insurance (3x salary) and Long-term Disability Insurance
• 6 weeks of paid parental leave (for both mom and dad)
• Dental - two plans to choose from
• Vision
• Short-term Disability
• Accident, Critical Illness, Hospital Indemnity
• 401(k) - up to 4% match on ROTH or Traditional contributions
• Generous paid-time off and 11 paid holidays
• Wellness plan including Financial, Occupational, Mental/Spiritual, and Physical health incentives up to $50/mo
• Employee Assistance Program including no cost, in-person mental health visits and employee discounts
• Monetary Anniversary Awards Program
• Monetary Birthday Awards
• Tuition Reimbursement Program

Minimum Age Requirement: Due to the nature of the responsibilities associated with this position-including independent decision-making, access to confidential information, and potential exposure to regulated environments-candidates must be at least 18 years of age at the time of hire. This requirement is in accordance with applicable federal and state labor laws and is intended to ensure compliance with workplace safety and legal standards.