VP, Threat Management and Response

Responsibilities

Vice President, Threat Management & Response

Job Description:

Humana is a Fortune 50 market leader in integrated healthcare whose dream is to help people achieve lifelong well-being. As a company focused on the health and well-being of the people we serve, Humana starts from within, and is committed to providing progressive benefits that advance the employment experience and vitality of the associate community. Through offerings anchored in a whole-person view of human well-being, Humana embraces a focus on stimulating positive individual and population changes while nurturing a sense of security, enabling people to live life fully and be their most productive.

As a direct report to the Chief Information Security Officer (CISO), the Vice President of Threat Management and Response (TMR) will oversee the programs that gather Threat Intel, perform penetration testing, manage vulnerabilities, monitor & respond to events & incidents, and manage insider threat. The successful candidate will provide thought leadership to Enterprise Information Protection leadership team to mature the cybersecurity operations program at Humana.

Job Responsibilities:

• Develop and execute the threat management and response (TMR) strategy aligned with the organization’s overall security objectives
• Provide vision and direction to the TMR team, setting clear goals and performance expectations
• Collaborate with other executives and stakeholders to ensure TMR goals align with business objectives.
• Oversee and mature the capabilities to adequately monitor the threat environment and rapidly respond to events and incidents to ensure recovery
• Oversee the day-to-day operations of the TMR team, ensuring efficient and effective security measures
• Lead security monitoring maturity in coverage and efficacy, working closely with Technology Observability organization
• Inform the organization on the evolving threat landscape from external and internal viewpoint, to continuously improve the security decisions
• Make decisions for the TMR team and EIP strategy based on threat and risk
• Lead management of vulnerabilities based on residual risks and ensure adequate mitigating controls
• Lead red-blue team and purple team testing, to continue to inform and improve the threat management controls
• Lead and mature the insider threat program, working closely with Legal, Compliance, Human Resources and other stakeholders
• Recruit, mentor, and develop a high-performing team
• Foster a culture of continuous learning and professional development

Required Qualifications:

• Bachelor’s degree
• Experience with mergers & acquisitions, divesture, and integration activities
• 15 years of technical leadership experience in Information Security (strongly preferred) or Information Technology
• 10 years of people leadership experience
• Proven track record of successfully leading and managing large-scale cybersecurity operations in complex organizations
• In-depth knowledge of security compliance, technology, and risk best practices
• Excellent leadership, communication, and collaboration skills to effectively engage with stakeholders at all levels of the organization

Preferred Qualifications:

• Strong experience working in a matrixed environment
• Healthcare experience
• MITRE ATT&CK framework

Scheduled Weekly Hours