Become a part of our caring community and help us put health first
 

The Lead, ISO oversees and executes EIP decision-making authorities within Humana (cross-Departmental / cross-Line of Business) and, in some cases, within Humana’s subsidiary organizations. The Lead, ISO works on problems of diverse scope and complexity ranging from moderate to substantial.

The Lead, Information Security Officer provides security leadership to a subsidiary in Humana’s Home Health organization. This is a strategic leadership role, focused specifically on information security in CenterWell provider organization.

The Lead, ISO requires an in-depth understanding of how organization capabilities interrelate across the function or segment. This role will coordinate the activities of cross-organizational and multi-disciplinary security functions, operations, and product teams, working with business and technology stakeholders to identify business needs and manage the definition and deployment of security capabilities and processes.

This role demands a high level of leadership abilities, stakeholder management skills and technical expertise.

Key Responsibilities:

· Security Leadership: Provide leadership as a single point of contact (SPoC) on Security for Technology & Business Teams. Develop and implement a comprehensive strategy that aligns with the organization's objectives. Develop and manage budget and performance metrics for the organization.

· Stakeholder Engagement: Collaborate with other departments and executive leadership to ensure cybersecurity measures are integrated into all facets of the organization. Communicate complex security concepts to non-technical stakeholders.

· Continuous Improvement of Security Posture: Evaluate and enhance the effectiveness of security protocols and tools to anticipate and mitigate emerging threats. This involves staying ahead of the latest cybersecurity trends and technologies.

· Budget and Resource Management: Manage the budget and resources allocated for threat response operations, ensuring optimal use of assets to achieve cyber security objectives.

· Team Management and Development: Lead, mentor, and develop a team of craftsmen who excel in their domain.

Other Responsibilities:

· Development and tracking of key risk indicators (KRIs) related to frontline security operations, to benchmark and further enhance capabilities.

· Develop staff of varying skill levels on both cybersecurity competencies/expertise and personal development. Guide in their continued growth and success as individuals and as a team.

· Working knowledge of common industry cybersecurity requirements and regulatory requirements such as: GDPR, HIPAA, HITRUST, ISO 27001, NIST 800-53, and PCI-DSS

· Ability to communicate clearly and professionally with all levels of an organization as well as with external partners.

· Excellent communication and interpersonal skills including a strong ability to create positive and professional business relationships with product, engineering and architecture teams.

· Manage and develop the talent, including engagement, well-being, and individual development plan creation, refining, and execution, with the goal of building and maintaining a high-performing team.

Use your skills to make an impact
 

Education and Experience Requirements:

Professional Experience: At least 10 years of experience in cybersecurity, with a well-rounded experience in Application, Infrastructure and Data Security.

· Educational Background: A bachelor’s degree in computer science, Cybersecurity, Information Technology, or a related field. Advanced degrees (e.g., Master’s) are highly desirable.

· Leadership Skills: Strong leadership and team management skills. Ability to mentor and develop talent.

· Communication Skills: Excellent communication and interpersonal skills. Ability to effectively communicate complex security issues to both technical and non-technical stakeholders.

· Technical Expertise: Deep understanding of cybersecurity principles, incident response, threat landscapes and industry frameworks.

• Systems thinking – the ability to see how parts interact with the whole (big picture thinking)
• Understanding of Project Management processes
• Proficiency in Process Flows
• Efficient Time Management and proficiency in multi-tasking and prioritizing projects
• Proficient knowledge of Cloud capabilities – O365, Azure, GCP, AWS
• Excellent Presentation skills and ability to present to senior management.
• Must be a self-starter with ability to lead and develop a team of analysts with minimal supervision.

Role Desirables

• One or more advanced security certifications such as CISSP, CISM, CISA, CRISC etc