I am...

NA

About DeepSeas

With nearly 30 years of experience in cyber defense, DeepSeas is trusted by 350+ clients, including Fortune 100 enterprises and mid-market organizations. Leveraging deep expertise that combines world-class cyber threat detection and response with industry-leading analysts, tailored threat intelligence, and accredited incident responders, DeepSeas is always on, always watching. Its Managed Detection & Response offering, DeepSeas MDR+, is anchored by its acquisition of Booz Allen Hamilton’s commercial Managed Threat Services (MTS) business in 2022. DeepSeas is the first and only MDR provider that covers the entire converged attack surface for the mid-market, including OT, IT, cloud, and mobile. Its full-spectrum cyber threat monitoring service is award-winning and backed by world-renowned researchers, data scientists, and mathematicians who have published over 250 papers and created a broad base of intellectual property, while achieving a number of scientific breakthroughs in the areas of big data, machine learning, and artificial intelligence as it applies to the detection of advanced and unknown cyber threats.

NA

Required Qualifications

NA

Preferred Qualifications

NA

NA

Job Summary

The focus area for this Director will be leading the organization's ability to effectively respond to and recover from events that result in interruption of Point32Health's business operations. In this role, the Director Cyber & Information Security will be focused on leading a team responsible for:

• Developing and implementing a strategy and practices that will ensure that the organization is prepared for events that may result in extended interruption of technology systems, applications, or business operations.

• Setting requirements and providing education to business and technology stakeholders about their roles in supporting the organization's business continuity, disaster recovery, and incident/crisis management disciplines.

• Development, maintenance, and adoption of a single incident/crisis management framework across the organization - all hazard/threat types.

• Ensuring that the organization's business continuity and disaster recover procedures/playbooks remain up-to-date

• Leading tabletop and simulation exercises to help ensure preparedness and to proactively identify and address opportunities for improvement.

• Anticipate the impact of core systems, applications, facilities, and vendor relationships being unavailable and implement plans that will reduce the impact of those events.

The Director, Cyber & Information Security, will report into the Chief Information Security Officer (CISO) for Point32Health. The Director leads Cyber & Information Security managers and/or security leaders to oversee and help to ensure that core programs are effectively implemented. This role is integral in driving the organization’s Cyber & Information Security strategy and objectives. The Director, Cyber & Information Security is considered a leader within the IT Department and is expected to work collaboratively to identify, influence, and enhance areas of improvement across the organization.

Who We Are

Point32Health is a leading health and wellbeing organization, delivering an ever-better personalized health care experience to everyone in our communities. At Point32Health, we are building on the quality, nonprofit heritage of our founding organizations, Tufts Health Plan and Harvard Pilgrim Health Care, where we leverage our experience and expertise to help people find their version of healthier living through a broad range of health plans and tools that make navigating health and wellbeing easier.

We enjoy the important work we do every day in service to our members, partners, colleagues and communities.

• Manage a team of managers/senior leaders responsible for overseeing the core pillars of Cyber & Information Security
• Develop and implement policies, standards, and guidelines that continuously increase the organization’s Cyber & Information Security program maturity
• Communicate potential security concerns/exposures with recommended improvements
• Lead communication and collaboration efforts with the business and IT to ensure quality solutions are delivered
• Evangelize the objective to embed security behaviors and principles into the Point32Health culture through active engagement, education, awareness, and partnership
• Develop operational excellence in anticipation and response to evolving threats and opportunities to improve cyber and information security
• Identify business risk and communicate risk to appropriate leadership
• Collaborate with stakeholders to define and implement technical and non-technical controls designed to cyber risk objectives and legal / regulatory obligations.
• Maintain the risk repository to continually identity, prioritize, and mitigate cyber and information security related risk issues
• Participate in various forums and groups across Point32Health to understand the risk environment and to provide recommends that effectively incorporate security objectives while balancing the business impact of recommendations provided
• Facilitate adoption of leading security practices to remain in compliance with regulations and to support our continuous monitoring and improvement goals
• Maintain up-to-date knowledge of the cyber and information security industry, including awareness of new or revised security capabilities, improved security processes, threat scenarios, trends, etc.
• Identify/recommend tools, processes, software, and protocols to advance or replace current security practices, services, or technologies to meet strategic objectives.
• Other duties and projects as assigned.

EDUCATION, CERTIFICATION AND LICENSURE:

• Bachelor’s degree in Cyber Security, Computer Science, Risk Management, or related field preferred or equivalent experience

EXPERIENCE (minimum years required):

• 10+ years combined IT, cyber/information security, risk, audit, compliance, with increasing responsibility
• 5+ years in cybersecurity or field(s) related to the programs for which the role is responsible for
• 5+ years in a leadership role, preferably with at least 2 of those years overseeing other managers
• Experience in leading or sponsoring implementation of technical security solutions within large organizations
• Experience developing and implementing process-based security controls, processes, and capabilities
• Experience in engaging with and managing vendors responsible for implementing processes and/or IT solutions
• Experience creating and maintaining security requirements, guidelines, and procedure documents
• Extensive knowledge and experience in security and compliance frameworks such as NIST, ISO, etc

SKILL REQUIREMENTS:

• Ability to lead a team, including managers, through mentoring, coaching, and motivating - providing an opportunity to learn and grow at Point32Health
• Requires the ability to identify risk within complex, interrelated programs; ability to assess dynamic situations objectively; and to make recommendations or decisions that best align with the corporate strategic objectives
• Ability to communicate effectively across multiple levels of the organization including managing through cross-business area or business unit prioritization discussions
• Strong relationship building skills; Must be able to work collaboratively and cooperatively as a team member, fostering an atmosphere of trust and respect
• Ability to influence all levels of staff and senior management in the decision-making process
• Deep understanding of IT infrastructure, program portfolio management, application design, and secure software development lifecycle (SDLC) methodologies

• Commitment to Diversity, Equity & Inclusion

  Point32Health is committed to making diversity, equity, and inclusion part of everything we do—from product design to the workforce driving that innovation. Our DEI strategy is deeply connected to our core values and will evolve as the changing nature of work shifts. Programming, events, and an inclusion infrastructure play a role in how we spread cultural awareness, train people leaders on engaging with their teams and provide parameters on how to recruit and retain talented and dynamic talent. We welcome all applicants and qualified individuals, who will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

• Scam alert: Point32Health has recently become aware of job posting scams where unauthorized individuals posing as Point32Health recruiters have placed job advertisements and reached out to potential candidates. These advertisements or individuals may ask the applicant to make a payment. Point32Health would never ask an applicant to make a payment related to a job application or job offer, or to pay for workplace equipment. If you have any concerns about the legitimacy of a job posting or recruiting contact, you may contact TA_operations@point32health.org

This job has been posted by Ignyte AI on behalf of Point32Health. Ignyte AI is committed to the fundamental principle of equal opportunity and equal treatment for every prospective and current employee. It is the policy of Ignyte AI not to discriminate based on race, color, national or ethnic origin, ancestry, age, religion, creed, disability, sex and gender, sexual orientation, gender identity and/or expression, military or veteran status, or any other characteristic protected under applicable federal, state or local law.

Req ID: R8365

Chick-fil-A is looking for a Senior Lead Cybersecurity Engineer to safeguard our vertical business lines and international restaurants (entities).

In this role you'll design and implement cutting-edge security solutions, collaborating with talented teams to protect our systems from evolving cyber threats. This role offers the opportunity to shape cybersecurity strategies, solve complex challenges, and make a real impact on a global scale. If you're a passionate cybersecurity professional who thrives in a fast-paced, innovative environment, we encourage you to apply and experience the Chick-fil-A culture.

This role is based in Atlanta, GA. For candidates that do not live in the Atlanta metropolitan area, Chick-fil-A offers a full relocation policy.

Our Flexible Future model offers a healthy mix of working in person and virtually, strengthening key elements of the Chick-fil-A culture by fostering collaboration and community.

• Security Engineering & Architecture
• Design, implement, and maintain security solutions to address vulnerabilities and risks within our systems, with a specific focus on Chick-fil-A's entities.
• Develop and enforce technical security standards, patterns, and best practices to establish and maintain a consistent and robust security posture across the organization.
• Proactively identify and address security gaps in existing systems and architectures, recommending and implementing enhancements to strengthen our overall security posture.
• Conduct comprehensive threat modeling exercises to identify potential vulnerabilities and recommend countermeasures, contributing to the overall resilience of our systems.
• Stay abreast of emerging threats and vulnerabilities, researching and recommending proactive security measures to mitigate potential risks.
• Consulting, Collaboration, and Relationship Management
• Collaborate closely with development teams to champion security best practices throughout the software development lifecycle, fostering a culture of security by design.
• Partner with cross-functional teams to translate strategic security objectives into actionable plans with defined metrics, timelines, and ownership. Drive progress, track key results, and ensure timely completion of initiatives.
• Proactively engage with teams across the organization to understand their unique security needs and tailor solutions to mitigate their specific risks.
• Leadership & Communication
• Transform cybersecurity objectives into measurable action plans, driving execution, tracking progress, and ensuring successful completion.
• Regularly report on security posture, initiatives, and key metrics to management, providing actionable insights and recommendations.
• Contribute to the development and maintenance of security documentation, including policies, procedures, and technical guides.
• Effectively communicate complex security concepts to both technical and non-technical audiences, ensuring clear understanding and buy-in from stakeholders.
• Lead by example to instill a culture of growth, trust, and transparent communication.

Required Qualifications

• Knowledge:
• Comprehensive understanding of cybersecurity principles.
• Comprehensive understanding of cloud service providers (prefer AWS).
• Comprehensive understanding of computer network principles.
• Comprehensive understanding of identity and access management principles.
• Strong understanding of cybersecurity engineering best practices.
• Skills:
• Secure architecture design review and threat modeling.
• Programming experience in a modern software development language.
• Proficiency in various AWS cloud services and security in the cloud.
• Technical risk assessment and mitigation planning.
• Strong problem-solving and analytical skills.
• Excellent verbal and written communication skills.
• Collaboration and teamwork skills.
• Abilities:
• Ability to design, implement, and improve cybersecurity solutions.
• Ability to analyze and respond to security threats and incidents effectively.
• Ability to review system designs and provide feedback to achieve secure design principles in the solution.
• Ability to identify and analyze potential methods of attack.
• Ability to build credibility and influence with stakeholders.
• Ability to balance cybersecurity initiatives with business priorities.
• Ability to quickly learn new technologies and architectures.

Preferred Qualifications

• Experience in one or more of the following roles: Cybersecurity Architect, Cybersecurity Engineer, Cybersecurity Consultant

• Minimum Years of Experience: 5
• Travel Requirements: 10%
• Required Level of Education: High School
• Preferred Level of Education: Bachelor's Degree
• Major/Concentration: Cybersecurity, Computer Science, MIS, Information Technology, Data Science, or a related technical field of study