Director, Platform and Data Security

At Zelis, we Get Stuff Done. So, let’s get to it! 

  

A Little About Us 

Zelis is modernizing the healthcare financial experience across payers, providers, and healthcare consumers. We serve more than 750 payers, including the top five national health plans, regional health plans, TPAs and millions of healthcare providers and consumers across our platform of solutions. Zelis sees across the system to identify, optimize, and solve problems holistically with technology built by healthcare experts – driving real, measurable results for clients.

  

A Little About You 

You bring a unique blend of personality and professional expertise to your work, inspiring others with your passion and dedication. Your career is a testament to your diverse experiences, community involvement, and the valuable lessons you've learned along the way. You are more than just your resume; you are a reflection of your achievements, the knowledge you've gained, and the personal interests that shape who you are.

Position Overview

The Director, Information Security is responsible for leading and managing the organization's platform and data security initiatives. This role involves developing and implementing security strategies, policies, and procedures to protect the company's data assets and ensure compliance with relevant regulations. The Director will work closely with cross-functional teams to identify and mitigate security risks, respond to security incidents, and promote a culture of security awareness throughout the organization.

What you’ll do:

• Develop and execute a comprehensive platform and data security strategy aligned with the organization's business objectives.

• Provide leadership and direction to the platform and data security team, fostering a culture of continuous improvement and professional development.

• Lead, mentor, and manage a team of professionals and managers to deliver outstanding service.

• Provide training, support, and development opportunities to team members to ensure high performance and engagement.

• Conduct regular performance reviews, provide feedback, and identify opportunities for professional development.

• Establish and enforce security policies, standards, and procedures to ensure the confidentiality, integrity, and availability of data.

• Ensure compliance with relevant regulations, industry standards, and best practices (e.g., GDPR, CCPA, HIPAA, ISO 27001).

• Identify, assess, and prioritize security risks related to platforms and data.

• Develop and implement risk mitigation strategies and controls to address identified vulnerabilities.

• Lead the response to security incidents, including investigation, containment, remediation, and reporting.

• Develop and maintain an incident response plan and conduct regular drills to ensure preparedness.

• Collaborate with IT, legal, compliance, and other departments to ensure a cohesive approach to security.

• Communicate security risks, incidents, and mitigation strategies to senior management and stakeholders.

• Promote a culture of security awareness by developing and delivering training programs for associates.

• Stay current with emerging security threats and trends, and ensure the organization is prepared to address them.

• Evaluate and implement security technologies and tools to enhance the organization's security posture.

• Stay informed about advancements in security technology and recommend innovative solutions to address evolving threats.

What you’ll bring to Zelis:

• Bachelor's degree in computer science, Information Security, or a related field. A Master's degree is preferred. Or related experience.

• Minimum of 15 years of experience in information security, with at least 5 years in a leadership role.

• Proven experience in developing and implementing security strategies and managing security teams.

• Relevant certifications such as CISSP, CISM, CISA, or equivalent are highly desirable.

• Strong knowledge of security frameworks, standards, and best practices.

• Excellent leadership, communication, and interpersonal skills.

• Ability to think strategically and make data-driven decisions.

• Strong problem-solving and analytical skills.

• Experience with security technologies such