Availity delivers revenue cycle and related business solutions for health care professionals who want to build healthy, thriving organizations. Availity has the powerful tools, actionable insights and expansive network reach that medical businesses need to get an edge in an industry constantly redefined by change.
At Availity, we're not just another Healthcare Technology company; we're pioneers reshaping the future of healthcare! With our headquarters in vibrant Jacksonville, FL, and an exciting office in Bangalore, India, along with an exceptional remote workforce across the United States, we're a global team united by a powerful mission.
We're on a mission to bring the focus back to what truly matters - patient care. As the leading healthcare engagement platform, we're the heartbeat of an industry that impacts millions. With over 2 million providers connected to health plans, and processing over 13 billion transactions annually, our influence is continually expanding.
Join our energetic, dynamic, and forward-thinking team where your ideas are celebrated, innovation is encouraged, and every contribution counts. We're transforming the healthcare landscape, solving communication challenges, and creating connections that empower the nation's premier healthcare ecosystem.
The Director of Cloud Security is a key member of the information security leadership team. They will primarily be responsible for leading the Cloud Security practice within Availity. Responsible for the development lifecycle security along with tools and initiatives that support cloud as part of a larger security program across all technology and development groups. This is a hands-on position that requires someone who has a great deal of systems/cloud engineering and experience together with a deep understanding of security testing and secure IAC configuration practices. They will also be required to carry out other information security related activities and projects as specified by management.
Sponsorship, in any form, is not available for this position.
Location: Remote, US
Role qualifications:
- Bachelor's degree in Computer Science or a related technology field or equivalent in comparable work experience within the development or security field.
- 10 years of progressive work experience designing business processes, process mapping, working on process improvement initiatives, and business applications security design
- 15 Years of experience in cloud engineering and architecture
- Current security and cloud credentials such as AWS Security, CSSLP, GPEN, GWAPT, GXPN, OSWE Certifications preferred.
Skills and Knowledge:
- Significant hands on experience with IAC such as terraform and cloudformation.
- Design experience with n-tier architectures (Data Access, Business Logic, and UI)
- Extensive experience with Cloud Security Posture Management (CSPM) technology and implementation.
- Strong understanding of CI/CD processes and automation
- Broad knowledge of Enterprise Software Engineering.
- Broad knowledge of Enterprise Infrastructure concepts and best practices
- Knowledge of best practices, FedRAMP, HIPAA, HITECH, HITRUST, NIST, ISO and other security and privacy related regulations and frameworks
- Working knowledge of DevSecOps and a container and micro-services architecture
- A working knowledge of Identity management tools and SAML/OIDC integrations.
- A working knowledge of Encryption and PKI solutions.
- Experience with Ethical hacking and application security testing.
- Excellent communication skills; must be able to interface with all levels of the organization.
- Open-minded, adaptable and passionate about learning
- Proven ability to deliver strategic plans for the organization to meet long term goals and successfully implement those plans
What you will be doing:
- Foster a collaborative team environment by organizing regular team-building activities and encouraging open communication.
- Conduct one-on-one meetings with individual contributors to understand their strengths and development areas, providing mentorship and guidance to enhance their skills.
- Implement personalized development plans for team members, including training sessions, workshops, and opportunities for hands-on projects.
- Monitor progress and provide constructive feedback, ensuring team members meet their professional goals
- Actively participate in architectural discussions to ensure security considerations are integrated into design processes.
- Collaborate with cross-functional teams to assess and refine cloud architecture, emphasizing best practices in security
- Develop and document comprehensive cloud security policies that align with industry standards and regulatory requirements.
- Regularly review and update policies to reflect evolving threats and organizational needs.
- Oversee daily cloud security operations, focusing on metrics to assess the effectiveness of security controls.
- Ensure security-related configuration management operations are executed efficiently and effectively
- Serve as the primary point of contact for audit requests, preparing documentation and evidence of compliance with security standards.
- Respond to customer inquiries regarding security practices, providing clear and informative responses.
- Develop and manage the cloud security budget, ensuring alignment with organizational goals and resource allocation.
- Maintain relationships with vendors, negotiating contracts and managing performance to ensure quality service delivery.
Next steps:
After you apply, you will receive text/email messages thanking you for applying and then you will continue to receive more text/email messages alerting you as to where you are in the recruitment process.
Interview process:
- Recruiter resume review
- Manager resume review
- Recruiter video interview
- Manager video interview
- Technical video interview
- Director video interview