Posted:
2/3/2025, 4:00:00 PM
Location(s):
District of Columbia, United States ⋅ Washington, District of Columbia, United States ⋅ Illinois, United States ⋅ Chicago, Illinois, United States
Experience Level(s):
Expert or higher ⋅ Senior
Field(s):
IT & Security
The hiring range for this role is:
$180,000.00 - $220,000.00This is the lowest to highest salary we, in good faith, believe we would pay for this role at the time of this posting. We may ultimately pay more or less than the hiring range and this hiring range may also be modified in the future. A candidate’s position within the hiring range may be based on several factors including, but not limited to, specific competencies, relevant education, qualifications, certifications, relevant experience, skills, seniority, performance, shift, travel requirements, and business or organizational needs. This job is also eligible for annual bonus incentive pay.
We offer a comprehensive package of benefits including paid time off, 11 holidays, medical/dental/vision insurance, generous 401(k) matching, lifestyle spending account and many other benefits to eligible employees.
Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, or any other form of compensation that are allocable to a particular employee remains in the Company's sole discretion unless and until paid and may be modified at the Company’s sole discretion, consistent with the law.
Responsibilities include but are not limited to:
Primary Job Functions:
Leadership and Strategy: Develop, implement, and execute a comprehensive information security risk management and resilience strategy for the organization by serving as a thought leader and partner to ensure effective performance of security risks and resilience initiatives.
Risk Identification and Management: Identify, assess, and prioritize information security risks. Develop and implement risk mitigation strategies and controls to protect the organization's information assets and processes. Produce meaningful reports and metrics that enable effective awareness and management to desired risk levels.
Compliance Assessments: Responsible for ensuring compliance with relevant information security standards and regulations, including SOC, NIST Cybersecurity Framework, and ISO standards. Maintain clear and effective policies and procedures to address identified gaps and ensure continuous compliance.
Resilience Planning: Enhance the organization's resilience to handle disruptions to key systems and enabling processes. Develop and implement business resiliency practices, playbooks, alternatives, and rehearsal exercises that maintain critical business processes to achieve a minimally viable company level of operations. Maintain effective disaster recovery and business continuity processes that support effective resiliency practices.
Collaboration and Communication: Work closely with other departments, including business stakeholders, legal, compliance, HR, and information technology, to ensure a coordinated approach to designing and achieving resiliency outcomes. Achieve successful results by building collaborative relationships with key business partners.
Continuous Improvement: Stay updated with the latest security trends, technologies, and best practices. Continuously improve the organization's security posture by implementing new technologies and processes for efficiency and to deliver operational excellence.
Required Education, Experience and Certification:
Education:
Required Experience:
10 years of experience in information security, with a focus on risk management and resilience program development.
Experience in developing and implementing information security risk and resilience strategies.
Certification:
Knowledge, Skills, and Abilities:
Excellent leadership skills with the ability to effectively influence and inspire others towards a shared vision/goal.
Strong collaboration, people management and coaching skills.
Ability to effectively communicate and build productive work relationships
Strong knowledge of information security frameworks, standards, and regulations (e.g., NIST, ISO 27001, GDPR, SOC 2).
#LI_HYBRID
Website: https://bcbs.com/
Headquarter Location: Chicago, Illinois, United States
Employee Count: 501-1000
Year Founded: 1929
IPO Status: Private
Industries: Communities ⋅ Insurance