Director, Cloud Security

Availity delivers revenue cycle and related business solutions for health care professionals who want to build healthy, thriving organizations. Availity has the powerful tools, actionable insights and expansive network reach that medical businesses need to get an edge in an industry constantly redefined by change.

The Director of Cloud Security is a key member of the information security leadership team. They will primarily be responsible for leading the Cloud Security practice within Availity. Responsible for the development lifecycle security along with tools and initiatives that support cloud as part of a larger security program across all technology and development groups. This is a hands-on position that requires someone who has a great deal of systems/cloud engineering and experience together with a deep understanding of security testing and secure IAC configuration practices. They will also be required to carry out other information security related activities and projects as specified by management.

Sponsorship, in any form, is not available for this position.

Location: Remote, US

Role qualifications:

• Bachelor's degree in Computer Science or a related technology field or equivalent in comparable work experience within the development or security field.
• 10 years of progressive work experience designing business processes, process mapping, working on process improvement initiatives, and business applications security design
• 15 Years of experience in cloud engineering and architecture
• Current security and cloud credentials such as AWS Security, CSSLP, GPEN, GWAPT, GXPN, OSWE Certifications preferred.

Skills and Knowledge:

• Significant hands on experience with IAC such as terraform and cloudformation.
• Design experience with n-tier architectures (Data Access, Business Logic, and UI)
• Extensive experience with Cloud Security Posture Management (CSPM) technology and implementation.
• Strong understanding of CI/CD processes and automation
• Broad knowledge of Enterprise Software Engineering.
• Broad knowledge of Enterprise Infrastructure concepts and best practices
• Knowledge of best practices, FedRAMP, HIPAA, HITECH, HITRUST, NIST, ISO and other security and privacy related regulations and frameworks
• Working knowledge of DevSecOps and a container and micro-services architecture
• A working knowledge of Identity management tools and SAML/OIDC integrations.
• A working knowledge of Encryption and PKI solutions.
• Experience with Ethical hacking and application security testing.
• Excellent communication skills; must be able to interface with all levels of the organization.
• Open-minded, adaptable and passionate about learning
• Proven ability to deliver strategic plans for the organization to meet long term goals and successfully implement those plans

What you will be doing:

• Foster a collaborative team environment by organizing regular team-building activities and encouraging open communication.
• Conduct one-on-one meetings with individual contributors to understand their strengths and development areas, providing mentorship and guidance to enhance their skills.
• Implement personalized development plans for team members, including training sessions, workshops, and opportunities for hands-on projects.
• Monitor progress and provide constructive feedback, ensuring team members meet their professional goals
• Actively participate in architectural discussions to ensure security considerations are integrated into design processes.
• Collaborate with cross-functional teams to assess and refine cloud architecture, emphasizing best practices in security
• Develop and document comprehensive cloud security policies that align with industry standards and regulatory requirements.
• Regularly review and update policies to reflect evolving threats and organizational needs.
• Oversee daily cloud security operations, focusing on metrics to assess the effectiveness of security controls.
• Ensure security-related configuration management operations are executed efficiently and effectively
• Serve as the primary point of contact for audit requests, preparing documentation and evidence of compliance with security standards.
• Respond to customer inquiries regarding security practices, providing clear and informative responses.
• Develop and manage the cloud security budget, ensuring alignment with organizational goals and resource allocation.
• Maintain relationships with vendors, negotiating contracts and managing performance to ensure quality service delivery.

Availity culture and benefits:

• Availity is a certified "Great Place to Work", a "Best Workplaces for Technology Companies", a "Best Workplaces for Women" and a "Best Workplaces for Millennials"!
• Culture is important to us and there are many ways for you to make your mark here!
• We have several Diversity & Inclusion teams and various ways to engage with fellow Availity associates. "AvaiLadies", "Beyond Black", "HOLA", "Availity Pride", "VetAvaility" a Young Professionals Group and "She Can Code IT" a group for women in tech are some of the groups you can get involved in.
• Availity is a culture of continuous learning. We have many resources and experts in our tech stack and in our industry that can help get you there too!
• We offer a competitive salary, bonus structure, generous HSA company contribution, healthcare, vision, dental benefits and a 401k match program that you can take advantage of on day one!
• We offer unlimited PTO for salaried associates + 9 paid holidays. Hourly associates start at 19 days of PTO and go up from there with all the same holiday benefits.
• Interested in wellness? We allow our associates to reimburse up to $250/year for gym memberships, participation in racing events, weight management programs, etc.
• Interested in furthering your education? We offer education reimbursement!
• Availity offers Paid Parental Leave for both moms and dads, both birth parents and adoptive parents.
• Want to work for an organization that gives back to the community? You're at the right place! Availity partners with various organizations, both locally and nationally, to raise awareness, funds and morale as our staff members volunteer their time and funds to engage the organizations campaign.

Next steps:

After you apply, you will receive text/email messages thanking you for applying and then you will continue to receive more text/email messages alerting you as to where you are in the recruitment process.

Interview process:

• Recruiter resume review
• Manager resume review
• Recruiter video interview
• Manager video interview
• Technical video interview
• Director video interview

Availity is an equal opportunity employer and makes decisions in employment matters without regard to race, religious creed, color, age, sex, sexual orientation, gender identity, gender expression, genetic information, national origin, religion, marital status, medical condition, disability, military service, pregnancy, childbirth and related medical conditions, or any other classification protected by federal, state, and local laws and ordinances.

Availity is a drug-free workplace. Candidates are required to pass a drug test before beginning employment.

NOTICE: Federal law requires all employers to verify the identity and employment eligibility of all persons hired to work in the United States. When required by state law or federal regulation, Availity uses I-9, Employment Eligibility Verification in conjunction with E-Verify to determine employment eligibility. Learn more about E-Verify at http://www.dhs.gov/e-verify.

Click the links below to view Federal Employment Notices.

Family & Medical Leave Act Equal Employment Law Poster Pay Transparency Employee Polygraph Protection Act IER Right to Work Poster Important Notice about Employee Rights to Organize and Bargain Collectively with Their Employers