Chief Information Security Officer

Availity delivers revenue cycle and related business solutions for health care professionals who want to build healthy, thriving organizations. Availity has the powerful tools, actionable insights and expansive network reach that medical businesses need to get an edge in an industry constantly redefined by change.

At Availity, we're not just another Healthcare Technology company; we're pioneers reshaping the future of healthcare! With our headquarters in vibrant Jacksonville, FL, and an exciting office in Bangalore, India, along with an exceptional remote workforce across the United States, we're a global team united by a powerful mission.

We're on a mission to bring the focus back to what truly matters – patient care. As the leading healthcare engagement platform, we're the heartbeat of an industry that impacts millions. With over 2 million providers connected to health plans, and processing over 13 billion transactions annually, our influence is continually expanding.

Join our energetic, dynamic, and forward-thinking team where your ideas are celebrated, innovation is encouraged, and every contribution counts. We're transforming the healthcare landscape, solving communication challenges, and creating connections that empower the nation's premier healthcare ecosystem.

Availity is seeking a Chief Information Security Officer to lead the company’s enterprise cybersecurity, security assurance, and technology risk programs. Reporting directly to the Chief Technology Officer, the Chief Information Security Officer is responsible for protecting Availity, its customers, and the highly sensitive healthcare information entrusted to its platforms.

The successful candidate must have personally led significant healthcare security audit and assurance programs, including multiple Health Information Trust Alliance assessment or certification cycles, multiple System and Organization Controls examination cycles, major healthcare customer audits, and remediation of significant findings.

Sponsorship, in any form, is not available for this position.

Location: Remote, US

Role qualifications:

• Significant executive cybersecurity leadership experience, with substantial cybersecurity leadership experience in healthcare.
• Demonstrated experience protecting PHI and other regulated healthcare data in a large-scale, cloud-based healthcare technology environment.
• Direct executive accountability for major healthcare security audits, certifications, customer assessments, and regulatory examinations.
• Personal leadership of multiple HITRUST assessment or certification cycles and multiple SOC examination cycles.
• Experience leading complex healthcare customer security audits and assessments, including remediation of significant findings and prevention of repeat findings.
• Experience establishing continuous audit readiness, automating control monitoring, and automating audit evidence collection.
• Experience operating security programs across multiple cloud providers and securing highly distributed, virtual, and international teams.
• Experience establishing controls for cross-border access to healthcare information and systems containing PHI or other sensitive healthcare data.
• Board and executive-level communication experience, including presentation of security posture, audit results, risks, incidents, findings, and remediation status.
• Strong knowledge of cloud security, software security, identity, data protection, security operations, incident response, and cyber resilience.
• Proven ability to build and lead high-performing security organizations across multiple countries.

Preferred Qualifications:

• Security leadership experience in a large healthcare technology company serving health plans and healthcare providers.
• Experience with healthcare transaction networks, regulated healthcare data exchanges, large API ecosystems, and major healthcare customers.
• Experience consolidating overlapping security frameworks into a common control environment and materially reducing recurring audit time and cost.
• Experience implementing continuous control monitoring across multiple cloud providers.
• Experience with AI security and governance, acquisition integration, and security teams distributed across the United States and India.

What you will be doing:

Enterprise cybersecurity leadership

• Develop and execute a multi-year cybersecurity strategy aligned to business strategy, customer commitments, technology direction, and risk tolerance.
• Set the enterprise security vision, priorities, policies, standards, operating model, and accountability across technology, product, engineering, business, and corporate functions.