Join a passionate and purpose-driven team of colleagues who contribute to Trustmark’s mission of helping people increase wellbeing through better health and greater financial security. At Trustmark, you’ll work collaboratively to transform lives and help people, communities and businesses thrive. Flourish in a culture where appreciation, mutual respect and trust are constants, not just for our customers but also for ourselves. 

POSITION OVERVIEW:  We are currently looking for a Cybersecurity Leader, which will report to our CISO.  In this hands-on leadership role, you will lead a high-performing team of Security professionals in the areas of Security Engineering and Security Operations.  As a member of the IT Senior Leadership team, you’ll partner with all areas of IT and the four Trustmark business units to identify and mitigate risks which may impact business operations.  You will be responsible for the development and implementation of the overall Cybersecurity strategy for the organization.  You’ll also be responsible for the implementation of standard operating procedures which support prevention, detection and response of cybersecurity risks and threats. In this role, you will lead the identifying, analyzing and remediating of information security threats toward the business.

You should be comfortable interacting with the C-Suite as this role will work with and present to our Executive Leadership team on a regular basis.  Ideally you are a highly skilled, ambitious technical leader that is passionate about Security and wants to work for an organization where you can make an immediate and lasting impact.  THIS ROLE WILL BE A HYBRID POSITION, STRUCTURED AS THREE DAYS PER WEEK IN OUR LAKE FOREST, IL OFFICE AND TWO DAYS VIRTUAL.  

RESPONSIBILITIES:

• Key areas of this position include: Cybersecurity threat management, security infrastructure and applications, operational security, security incident and event management, cybersecurity threat intelligence, cybersecurity analytics, advanced incident response, malware analysis, data breach analysis & prevention, advanced forensics and computer network defense.
• Data protection, layered data defense via tools and tactics, application security program, and overall Enterprise Security Risk Management
• Detection, review, analysis and mitigation of threats and risks to the business leveraging security technologies, (e.g. Firewalls, IPS, SIEM tool, etc.), advanced analytics, risk assessments, red, blue and purple teaming, etc.
• Interact with IT and business stakeholders to understand risks to critical infrastructure by defining potential business impact with the responsibility to apply effective mitigation strategies through the information security incident management processes. Conduct forensics analysis directly and provide investigative support.
• Security Architecture, design, framework and vetting of new technologies, initiatives and solutions.
• Lead and drive vulnerability management, network and application based vulnerabilities, reporting and metrics.
• Conduct penetration testing, analysis, review, internal exploitation testing, ethical hacking, red teaming, malware analysis, etc.
• Provide ongoing updates and metrics on threats, incidents, risks, and budget planning.

QUALIFICATIONS: 

• Strong intellectual curiosity
• Bachelor’s Degree in Computer Science or related field, with 7+ years of progressive technical experience and 4+ years of progressive leadership experience
• Proven track record of leading and managing highly functional Security Team
• A deep understanding of cybersecurity, security risk management, MSSPs, SIEM tools, etc.
• Knowledge of and experience with privacy and security law issues, particularly HIPAA.
• Knowledge of security risk reporting, analytics, metrics, etc.
• Demonstrated track record of developing talent internally, along with attracting top talent externally
• Strong presentation, verbal and written communication skills with the ability to articulate complex ideas in easy to understand business terms to all levels of management including senior leaders.
• Ability to effectively interface with a variety of individuals, including technical leadership, business leadership, peers, staff, vendors and customers
• Strong collaboration, problem-solving and analytical skills along with strong business acumen and common sense
• Knowledge of NIST CSF, CCPA, NYDFS, HITRUST, PCI-DSS, SOC 1 Type ll, SOC2 Type ll
• CISM, CHSP, CEH, CISSP or CSIRT certifications preferred

All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, sex, sexual orientation, sexual identity, age, or disability.

Required Skills Required Experience

• Enrolled in a Bachelor’s/Master’s degree at a reputed graduate school. Fresh graduates in management or public health are encouraged to apply.
• Excellent communication and interpersonal skills and ability to work effectively in a complex environment.
• Comfort with collaborating across all levels of leadership internally.
• Basic research and analytical skills, including the ability to proactively identify opportunities.
• Demonstrated ability to multi-task and thrive in fast-paced, high-pressure setting.
• Excellent command over MS Office applications, especially MS Word, MS Excel, and MS PowerPoint
• Excellent in written and spoken English.

Skills to be developed and/or expanded during Internship:

•  Conducting background research on public health donor priorities, landscape and successful proposals.
•  Preparation of collateral to clearly demonstrate value proposition of an NGO to prospective donors and partners.
•  Knowledge of global health, digital health, nonprofit management and business development.
•  Fostering collaboration and coordination among team members
•  Exposure to PATH software and programs
•  Initial Internship duration - Three Months.

Must have legal authorization to work in India.

PATH is dedicated to building an inclusive workforce where diversity is valued.

PATH is an equal opportunity employer. Every qualified applicant will be considered for employment. PATH does not discriminate based on race, color, religion, gender, gender identity or orientation, genetic information, age, national origin, marital status, disability status, political ideology, military or protected veteran status, or any other characteristic protected by applicable federal, state, or local law.

*PATH has become aware of scams involving false job offers.*

Please advise:

• PATH will never ask for a fee during any stage of the recruitment process.
• All active jobs are advertised directly on our career's page.
• Official PATH emails will always arrive from an @path.org address or @silkroad.com address. 

Please report any suspicious communications to careersitehelp@path.org.