Director of Information Security - IntelliScript (Remote)

Requirements:

• Were seeking at least 10 years of relevant experience developing and monitoring information security policies and programs; facilitating security governance; conducting ongoing risk assessments; investigating breaches; managing budgets; implementing firewalls, IDS/IPS, and SIEM; and leading change management that supports adoption.
• We require at least 5 years of experience managing information security functions and employees.
• Candidates should have extensive experience managing security, risk, and compliance during cloud migrations and in cloud-native and hybrid environments.
• We require at least one professional certification, such as CISSP, CISM, or GIAC.
• Candidates should bring in-depth knowledge of information security technologies and architectures and how to apply them to mitigate risks across networks, systems, and data.
• Were looking for a continuous learner who follows developments in security and technology, demonstrates information security thought leadership, and can develop innovative, scalable business solutions while leading cross-functional teams.
• Candidates should have experience in a software or SaaS organization and in an Agile software development environment.
• We require strong program and project management skills, as well as excellent written and verbal communication skills.
• Candidates should have experience in an environment subject to HIPAA, PHI, and PII requirements.
• We value ownership, urgency, professionalism, sound judgment, attention to detail, practical problem-solving, adaptability, initiative, willingness to learn, and a collaborative, can-do approach.
• Were looking for someone who can coach, mentor, motivate, and empower others; foster an inclusive and constructive team environment; and support colleagues professional development.
• A bachelors or advanced degree is preferred.
• Experience in insurance underwriting, banking, or healthcare; in SAFe product development; or with a project management certification such as PMP is a plus.

Responsibilities:

• Lead our information security strategy and program, including a multi-year roadmap aligned with business, technology, product, and client priorities; governance; operating practices; metrics; and accountability.
• Chair the information security steering committee and communicate security risks, priorities, investments, and progress to senior leaders.
• Develop, maintain, and improve our security policies, standards, controls, and practices.
• Direct enterprise security risk management: identify, assess, prioritize, mitigate, or appropriately accept risks; explain technical risks in business terms; manage third-party security risk; and coordinate security requirements with clients, vendors, and other stakeholders.
• Partner with engineering, product, infrastructure, and IT teams to integrate security throughout the technology lifecycle and mature practices for cloud-native SaaS and hybrid environments.
• Oversee vulnerability management, penetration testing, threat monitoring, security testing, and preventative controls; assess our security technology portfolio and recommend investments based on risk and business needs.
• Promote security-by-design practices that help teams work efficiently while managing risk.
• Maintain incident-response roles, escalation paths, procedures, and communications; lead responses to significant security events and apply lessons learned to strengthen controls.
• Ensure monitoring and capabilities are in place to detect threats, vulnerabilities, breaches, malware, and data leakage.
• Sustain our security and compliance program in support of regulatory, contractual, and client commitments, including SOC and HITRUST certifications.
• Work with privacy, legal, compliance, and technology stakeholders on HIPAA, PHI, PII, and other applicable obligations; oversee audits, assessments, remediation, evidence management, and customer security reviews.
• Lead, coach, develop, and retain our Information Security team, creating clear accountability while enabling team members to own outcomes and grow.
• Direct company-wide security awareness and education, build trusted partnerships across the business, and provide reporting that helps leaders understand risk and make informed decisions.

Technologies:

• Cloud
• Support
• Security
• LESS
• Network

More

We are Milliman IntelliScript, a few-hundred-person team spanning actuarial science, information technology, and clinical practice. As a business unit of Milliman, Inc., a global consultancy, we develop data-driven SaaS products for insurance, health IT, and life sciences clients. Our culture is entrepreneurial, collaborative, and focused on innovation, customer service, transparency, and professional growth. We invest in training, career development, learning, and mentoring, and support employee-led resource groups and community involvement. We offer competitive compensation and comprehensive benefits, including medical, dental, and vision coverage; an employee assistance program; a 401(k) with matching and profit sharing; a discretionary bonus program; flexible spending accounts; paid time off and holidays; family-building and parental-leave benefits; life insurance; and short- and long-term disability coverage. This Director of Information Security role is part of our Technology leadership team and provides strategic direction for our company-wide security program as we continue developing SaaS solutions. The position is remote, with travel as needed to our Brookfield, Wisconsin office and nationwide for meetings, conferences, and team events, up to 20%. The expected application deadline is January 31, 2027. The overall salary range is $165,100–$313,145; ranges vary by location, with $189,865–$313,145 for specified higher-range locations and $165,100–$272,300 elsewhere. Compensation considers factors such as education, experience, qualifications, skills, and certifications. We provide equal employment opportunity to all qualified applicants.

last updated 43 week of 2026