高级总监 - 信息安全
Senior Director - Information Security
Qlarant 是一家非营利性公司，与公共和私营部门合作，打造高质量、安全且高效的医疗保健和人类服务项目。我们有多个业务线，包括人口健康、使用审查、管理护理组织质量审查，以及为发展障碍人士提供服务项目的质量保证。Qlarant 也是全国范围内在大型组织中打击欺诈、浪费和滥用行为的领先者。此外，我们的基金会为服务于弱势群体的项目提供资助机会。
最佳人才，最佳方案，最佳成果
职位简介：
作为企业安全官（CSO）的战略合作伙伴和高级顾问，负责制定和执行组织范围内的信息安全计划。领导跨职能项目，以降低风险、确保合规并保护关键系统、数据和基础设施。在安全政策、供应商风险管理、提案响应和监管评估方面提供专业级指导，同时在业务和技术部门之间建立合作关系。
主要职责：
- 作为企业安全官的代表，支持高管计划和企业安全战略。
- 制定并维护符合行业最佳实践和合规要求的全面安全政策、标准、流程和响应计划。
- 为联邦、州和商业合同的提案中涉及安全要求的部分提供书面技术响应。
- 领导全公司范围的项目，包括风险评估、事件响应协调、云安全评估和安全开发生命周期（DevSecOps）实施。
- 以清晰、可操作的方式向高级管理层和相关方展示安全态势、风险摘要和投资合理性。
- 与业务部门和IT负责人建立跨职能合作关系，将安全融入组织流程和项目中。
- 监督供应链和第三方供应商风险管理计划，确保与公司安全目标一致。
- 协调和促进内部和外部安全审计、风险评估和监管合规审查。
监督级别：
在已建立的部门政策框架内独立运作
查看英文原文
Qlarant is a not-for-profit corporation that partners with public and private sectors to create high quality, safe, and efficient delivery of health care and human services programs. We have multiple lines of business including population health, utilization review, managed care organization quality review, and quality assurance for programs serving individuals with developmental disabilities. Qlarant is also a national leader in fighting fraud, waste and abuse for large organizations across the country. In addition, our Foundation provides grant opportunities to those with programs for underserved communities.
Best People, Best Solutions, Best Results
Job Summary:
Serves as a strategic partner and senior advisor to the Corporate Security Officer (CSO), overseeing the development and execution of the organization’s enterprise-wide information security programs. Leads cross-functional initiatives that reduce risk, ensure compliance, and protect critical systems, data, and infrastructure. Provides expert-level guidance on security policies, vendor risk management, proposal responses, and regulatory assessments while building partnerships across business and technology units.
Essential Functions:
- Acts as a delegate and representative of the Corporate Security Officer to support executive initiatives and enterprise security strategy.
- Develops and maintains comprehensive security policies, standards, procedures, and response plans in alignment with industry best practices and compliance requirements.
- Provides written technical responses to security-related requirements in proposals for federal, state, and commercial contracts.
- Leads enterprise-wide initiatives including risk assessments, incident response coordination, cloud security evaluations, and secure development lifecycle (DevSecOps) implementations.
- Presents security postures, risk summaries, and investment justifications to senior executives and stakeholders in clear, actionable formats.
- Builds cross-functional partnerships with business units and IT leaders to integrate security into organizational processes and initiatives.
- Oversees supply chain and third-party vendor risk management programs to ensure alignment with corporate security objectives.
- Coordinates and facilitates internal and external security audits, risk assessments, and regulatory compliance reviews.
Level of Supervision Received:
Functions independently within broad scope of established departmental policies/practices; generally refers specific problems to manager only where clarification of departmental operating policies/procedures may be required.
Education (can be substituted for experience):
Master's Degree required
Work Experience (can be substituted for education):
15+ years required
Certifications:
Certified Information Systems Security Professional (CISSP) or equivalent required.
Certified Information Security Manager (CISM) preferred.
Certified Cloud Security Professional (CCSP) preferred.
GIAC Security Leadership Certification (GSLC) preferred.
Qlarant is an Equal Opportunity Employer of Minorities, Females, Protected Veterans, and Individuals with Disabilities.
Qlarant is a drug-free workplace. All offers of employment are contingent upon successful completion of pre-employment background and drug screens.
Originally posted on Himalayas