Director of Information Security

🔥 3 hours ago

🌽 Illinois, New Jersey, +2 more states – Remote

🌽 Illinois – Remote 🏖️ New Jersey – Remote 🦀 Maryland – Remote ⚔️ Virginia – Remote

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Hollis Cobb Associates

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 1977

🏥 Healthcare

💼 Consulting

📦 Logistics

Healthcare • Consulting • Logistics

Hollis Cobb Associates is a revenue cycle management and healthcare services company that partners with hospitals and healthcare providers to optimize billing, collections, and patient access processes. They combine hands-on services—front-end patient access, pre-authorization support, accounts receivable management, denials resolution, and bad-debt collections—with software products (fae for financial assistance and passage for automated pre-authorization) to streamline workflows, reduce denials, and improve cash recovery. Hollis Cobb positions itself as a B2B provider using technology and experienced staff to increase efficiency and patient satisfaction for clients nationwide.

📋 Description

• Own the information security program, including strategy, multi-year roadmap, budget recommendations, and success metrics • Design, deploy, and maintain security technologies across on-premises and cloud environments • Implement and document technical safeguards required by the HIPAA Security Rule for systems processing ePHI • Map security controls to the NIST Cybersecurity Framework and NIST SP 800-53, identify gaps, and drive remediation • Own PCI DSS compliance for cardholder data environments, including segmentation, system hardening, ASV scans, assessments, and audit evidence • Lead HIPAA security risk analysis and risk management, maintaining a risk register and communicating decisions to leadership • Manage vulnerability and patch programs • Engineer and maintain identity and access management controls, including MFA, role-based access, privileged access management, and access reviews • Own the incident response program, plans, playbooks, tabletop exercises, and incident response efforts • Coordinate breach risk assessments with compliance and legal • Prepare for and lead external audits, OCR inquiries, payer or partner security assessments, and customer security questionnaires • Own third-party risk management, including vendor and Business Associate reviews and security terms of Business Associate Agreements • Contribute to security awareness efforts and advise IT staff on secure practices • Perform other duties as assigned

🎯 Requirements

• BS in Computer Science, Management Information Systems, or a related field is preferred • Minimum of three years of combined experience in information security, compliance, technology audit, or a related field • Working knowledge of the HIPAA Security Rule, the NIST CSF and SP 800-53, and PCI DSS v4.0 requirements • Hands-on experience with SIEM (e.g., Splunk, Microsoft Sentinel), EDR (e.g., CrowdStrike, Defender), next-generation firewalls, and vulnerability scanners (e.g., Tenable, Qualys, Rapid7) • Solid understanding of networking (TCP/IP, segmentation, VPNs), Windows and Linux administration, and Active Directory/Entra ID • Experience securing cloud environments (AWS, Azure, or GCP) • Strong written communication skills, including the ability to produce clear documentation for auditors and explain risk to non-technical stakeholders • Relevant certifications such as CISSP, CISM, GIAC (GSEC, GCIH, GCCC), CompTIA Security+/CASP+, HCISPP, or a cloud security certification are preferred • Familiarity with HITRUST CSF is preferred • Scripting or automation experience (PowerShell, Python, Bash) and familiarity with infrastructure-as-code are preferred • Ability to establish priorities and successfully complete multiple assignments • Ability to work effectively both independently and as part of a team • Excellent verbal and written communication skills • Strong analytical skills with attention to detail and accuracy • Ability to organize complex work assignments for multiple clients and assure timely and accurate service delivery • Ability to work independently with minimal supervision • Occasional travel required

🏖️ Benefits

• Medical • Health Savings Account for High Deductible Medical plan • Dental • Vision • Life Insurance • Disability Insurance • Retirement with Company Matching • Paid Time Off & Holidays • Employee Assistance Program • Referral Program

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume