Director of Security and Technical Operations

Who we are

Jellyvision ALEX®, is on a mission to improve lives by helping people choose and use their benefits. We are raising the bar—for benefits and the employee experience (for our employees and those of the customers we serve) – by scaling personalization, compassion and an earnest intent to be helpful in all that we do. 

Jellyvision people are a group of creative problem solvers who use good judgment, give each other honest feedback, engage in real debate, and snack frequently. We are curious, hungry, and humble—because we know this is how we’ll continue to make an impact. We’re kind, biased towards action, and sweat the details to create great experiences for those we serve.  

We are an inclusive, human-first workplace. Respect and trust for each other are foundational, and our equitable total rewards offerings support the lives and holistic well-being of our unique people. At Jellyvision, expect career experiences that challenge you, empower you to have a direct impact on our mission, and enable you to learn, try, and do while having fun along the way.  

What’s the role?

The Director of Security and Technical Operations is responsible for overseeing and managing all aspects of security and technical operations within the organization. This role involves developing and implementing security protocols, procedures, and strategies to safeguard company assets, data, and personnel. Additionally, the Director will lead a team of technical professionals to ensure the smooth functioning of all technical systems and cloud infrastructure. The ideal candidate will possess strong leadership skills, a comprehensive understanding of cybersecurity best practices, and the ability to effectively communicate and collaborate across departments to mitigate risks and optimize operational efficiency.

What you’ll do to be successful 

1.) Security Strategy and Governance

• Develop, implement and Maintain a comprehensive security strategy aligned with organizational goals, industry standards, and regulatory requirements.
• Establish and enforce security policies, procedures, and guidelines to safeguard company assets, data, and intellectual property.
• Lead security risk assessments and audits to identify vulnerabilities and define risk mitigation strategies.
• Ensure compliance with relevant regulations and standards, such as  HIPAA and industry-specific security frameworks.

2.) Technical Operations Management

• Oversee the day-to-day management and operation of technical infrastructure, systems, and services, ensuring reliability, scalability, and performance.
• Lead the planning, implementation, and maintenance of security controls and measures across network, cloud, and endpoint environments.
• Monitor and analyze security logs, alerts, and incidents to detect and respond to security threats and breaches in a timely manner.
• Collaborate with IT and engineering teams to assess, select, and deploy security technologies, tools, and solutions.

3.) Leadership and Team Development

• Provide leadership and guidance to a team of security and technical professionals, fostering a culture of collaboration, innovation, and continuous improvement.
• Recruit, train, and mentor team members to develop their skills and expertise in security and technical operations.
• Set performance goals and conduct regular performance evaluations to ensure team members meet expectations and contribute effectively to organizational objectives.
• Collaborate with cross-functional teams, executives, and stakeholders to communicate security priorities, initiatives, and progress.

Experience & skills you’ll need

• 10+ years of experience in cybersecurity, technical operations, or a related field.
• Leadership: knowledge as a senior information security leader within a highly regulated industry, as well as management skill sets for a team of information security and risk management professionals.
• Frameworks and standards: familiarity with one or more of the following NIST CSF, ISO 27001, SOC II or PCI
• Cloud: Experience with cloud security principles and practices along with AWS operations and FinOps
• Sales support: to sell our products, customers and partners must have confidence that Jellyvision’s infrastructure is sufficient to protect their data.  You are in charge of making sure prospects are satisfied with our processes and protections – both by empowering others with accurate information and by front lining efforts with more challenging prospects. 
• Application security: a working knowledge of application security, preferably in the healthcare industry, including having done security architecture reviews, knowledge of application technologies and frameworks, expert level knowledge of security weaknesses and vulnerabilities, expert level knowledge of remediation and mitigation techniques.
• Application development: expertise of modern application development practices, and how security can be weaved into the processes and the technology to enable secure solutions
• Risk management: proficient in running risk assessments and leading a risk management team.
• Healthcare industry: Experience with HIPAA policies and ongoing management, preferably with an organization that did application development.
• Security Operations: hands-on experience working with either an internal or external security operations center, including experience working with an incident management program.
• Security Certified: one of the following security focused certifications: CISSP, CISM, or CISA.

Core Competencies

• Balances Stakeholders
• Communicates Effectively
• Decision Quality
• Instills Trust
• Manages Ambiguity 
• Organizational Savvy 
• Collaborates

The Details 

• Location: Remote 
• Starting Salary: $188,824-$230,785

What Jellyvision will give you

Check out our benefits here!

Jellyvision is committed to continuous evolution and to fostering a more diverse and inclusive workplace where everyone is welcomed, valued, and respected. It doesn’t matter your race, ethnicity, religion, sexual orientation, age, marital status, disability, gender identity, sex, or country of origin...we just want amazing people who are willing to grow along with us.