Career Opportunities

Apply with Linkedin

Position Summary

We are seeking an experienced and strategic cybersecurity leader to oversee the continued development and execution of our enterprise cybersecurity program. This is a leadership role reporting to the CIO, responsible for protecting the confidentiality, integrity, and availability of company assets, data, and infrastructure across a diverse technology landscape and several product lines. 

The of Cybersecurity will lead a skilled internal team and manage key third-party relationships while partnering across the organization with technology and business teams to ensure that security remains effective, compliant, and aligned to business goals. The ideal candidate brings a balance of compliance expertise, technical depth, and leadership presence, with a proven ability to lead security programs in complex, highly regulated, and fast-paced environments. 

Key Responsibilities

Effectively apply your skills and experience, influence your peers and lead your team to execute on the key areas of: Security Strategy, Security Governance and Compliance, Risk and Vulnerability Management, Security Operations and Incident Management, Infrastructure and Application Security, Network Operations and Security, Business Continuity and Disaster Recovery. 

Security Strategy

• Refine and extend the existing cybersecurity roadmap in alignment with evolving business goals and risk appetite
• Partner with the CIO to prioritize and execute security initiatives focused on risk management, resilience, and operational excellence
• Monitor the threat landscape and relevant regulatory changes to inform strategic planning
• Establish and track key performance indicators (KPIs) to measure program effectiveness and maturity

Governance and Compliance

• Maintain and evolve cybersecurity governance, including policy oversight, standards development, and program documentation
• Lead all external audit activities, including SOC 2 Type II and client-required assessments and questionnaires responses
• Support legal and sales teams in reviewing security terms in contracts, managing client security questionnaires
• Maintain audit readiness and ensure consistent adherence to security controls across the organization

Risk and Vulnerability Management

• Oversee cybersecurity risk identification and tracking, including ownership of the security risk register
• Lead vulnerability management practices, including scanning, triage, and coordination of timely remediation
• Oversee third-party penetration testing and coordination of timely remediation
• Facilitate threat modeling and risk reviews for key initiatives, infrastructure changes, and third-party integrations
• Ensure alignment of risk mitigation with IT and product delivery cycles

Security Operations and Incident Management

• Lead day-to-day security operations, including oversight of monitoring, alerting, and threat detection in collaboration with MSSPs
• Ensure appropriate configuration and effectiveness of security tooling (SIEM, EDR, logging, etc.)
• Serve as the executive point of contact for security incidents, coordinating internal response and external communications as necessary
• Conduct post-incident reviews and ensure implementation of lessons learned

Infrastructure and Application Security

• Guide infrastructure and development teams on secure architecture, including hybrid environments (cloud, on-prem., and mainframe)
• Oversee cloud security practices in AWS and Azure, and ensure secure network configurations across all environments
• Collaborate with development teams to maintain and extend SDLC practices, manage application security testing, and support DevSecOps models
• Provide oversight and leadership for security architecture reviews and initiatives

Business Continuity and Disaster Recovery

• Oversee the maintenance of BC/DR policies and standards to include coordination with business lines establishing Recovery Point Objectives (RPO) Recovery Time Objectives (RTO), and Business Impact Analyses (BIAs).
• Coordinate with technical staff to ensure appropriate procedures and technology are in place to execute on the items above.
• Collaborate with technical staff to conduct semi-annual BC/DR exercises and lessons learned sessions.

Cross-Functional Leadership and Communication

• Act as the primary security liaison to technology, product, and business unit leaders
• Prepare and deliver board and executive-level reporting, including risk posture summaries and security program updates.(Prior board or audit committee presentation experience preferred)
• Effectively translate technical security concepts into actionable business language for varied audiences
• Lead security awareness training and foster a company-wide culture of security accountability including education, phishing tests, and tabletop exercises.

Team Management

• Lead a direct team consisting of 7 staff:
• 1 IT Security & Network Manager
• 2 Network Engineers (each with varying specialty areas of focus)
• 4 Security Analysts (each with varying specialty areas of focus)
• Manage relationships with MSSPs and external security vendors, ensuring clear direction and accountability
• Support the professional development of team members and build a high-performance, collaborative team culture 

Qualifications

• 10+ years of progressive experience in cybersecurity roles, with significant leadership responsibility
• Strong ability to map modern security-centric architectures to real-world use cases, coupled with deep knowledge of the security and observability space, cloud and application security, as well as technological shifts in the information security space.
• For example, the application and impact of Gen AI, machine learning, robotics on security.
• Demonstrated success managing security programs in regulated industries such as insurance, finance, fintech, insurtech, healthcare, or SaaS
• Hands-on familiarity with security operations, risk management, and compliance functions and an ability to lead technical staff to robust and successful outcomes.
• Direct experience leading SOC 2 audits and client-facing security engagements
• Strong technical understanding of hybrid infrastructure environments, including AWS, Azure, and legacy systems
• Technologist with a strong security background who gains credibility and establishes strong relationships at all levels of the organization. Comfortable discussing complex security details in design and architecture sessions as well as briefing executives or non-technical persons on security topics.
• Track record of managing and mentoring security teams and influencing across departments
• Familiarity with GLBA, HIPAA, or other financial and health data regulations
• Deep knowledge of common frameworks such as NIST CSF, ISO 27001, CIS Controls and experience implementing at least one of those frameworks.
• Exceptional verbal and written communication skills with experience interacting and influencing key internal & external stakeholders (VP+ and CISO/CIO/CTO level) and boards
• Bachelor’s degree in Computer Science, Information Security, or a related field
• At least one industry certification required (e.g., CISSP, CISM, CISA, or equivalent), Additional relevant certifications preferred 

Most importantly, successful candidates will be aligned with MIB’s Core Values in behaviors, actions, and results:

• Think Like a Client
• Act Like an Owner
• Make a Difference

Apply with Linkedin

About the job

Remote Senior Software Engineering Opportunity

Join a progressive development organization that is bringing innovation to the life insurance industry. If you enjoy exploring new technologies and are looking to participate in transformative software development, then we want to talk to you. The ideal candidate is a hands-on full stack engineer with technical lead and solutions architecture experience in designing and developing performant user-friendly software systems. You should embody a passion for continuous improvement and test-driven development. We are looking for someone who demonstrates excellent communication skills, is a great collaborator, has strong analytical skills, and learns from setbacks and is accountable for success.

Education / Skills and Experience

Education: B.S. in Computer Science required or a combination of equivalent educational experience

Skills and Experience:

• A minimum of 4 years of expertise in designing complex software systems utilizing microservices architecture, adhering to design principles like SOLID, and employing design patterns, integration design patterns, and design tools such as UML and C4, as well as methodologies like BDD, DDD, and TDD.
• A minimum of 7 years of full stack development experience
• 7 years of proficient software development experience with Java, Spring Framework, and Spring Boot.
• 3 years of hands-on experience implementing AWS cloud technologies
• 2 years of development experience with UI frameworks, particularly Angular or React.
• 3 years of experience mentoring engineers 
• Proven experience of establishing code review best practices and ensuring high code quality within the teams
• Experience driving innovation and continuous improvement initiatives

Preferred Skills:

• Demonstrated expertise with DevOps and build automation tools including Docker, Gradle, Git, Github actions, and Artifactory.
• Proficient in developing and troubleshooting complex software systems in mixed environments, including Linux, Unix, and Windows.
• Strong communication skills (both oral and written) and a collaborative team player.
• Experienced with testing frameworks such as JUnit and Mockito.
• Skilled in using queue technologies like RabbitMQ.
• Proficient with relational databases, particularly PostgreSQL or similar.
• Adept at building APIs and services using REST, SOAP, and related technologies.
• Experienced in working within an agile development environment.
• Expert in secure programming practices.
• Proficient with HTML5, CSS, and SCSS.
• Familiar with central logging tools such as Datadog.
• Experience with Healthcare integration, FHIR HL7, CCD/CDA 

General Duties and Responsibilities:

• Analyze, design, code, test, debug, maintain, and document software components in accordance with MIB’s software architecture and software development processes
• Participate in application performance tuning
• Ensure developed applications adhere to MIB security model / policies
• Ensure that deliverables meet the project requirements, including timely delivery and quality (reliability, performance, and maintainability)
• Contribute to the creation of project schedules by providing estimates related to effort, duration, and completion of assigned tasks
• Adhere to MIB’s processes for change / configuration management
• Find innovative ways to improve quality and productivity
• Provide ongoing technical support for external / internal users of software components
• Participate and effectively contributes in a team environment, in accordance with MIB’s Core Values - Think Like a Client; Act Like an Owner; & Make a Difference!
• Communicate effectively with other MIB technical units as well as business stakeholders to facilitate the development process to ensure the attainment of MIB corporate goals
• Participate in a skills growth path to promote achievement of corporate goals as recommended by the Department Manager
• Comply with all applicable and departmental software policies, standards, and practices including all standards relating to Security and Disaster Recovery

Featured benefits

Medical insurance, Vision insurance, Dental insurance, 401(k), Child care support, Paid maternity leave, Paid paternity leave, Commuter benefits, Tuition assistance, Disability insurance

While we have been around for more than 100 years, we are continually evolving to meet the industry’s changing needs. On the one hand, we are an established and well-respected company, dedicated to setting the standard for the industry. On the other hand, our work environment feels like a startup—entrepreneurial, mission-driven, and focused on quickly and efficiently bringing new services to market.

Culture

We are proud that MIB is one-of-a-kind in the insurance market—a member consortium
with associate shareholders. And we believe how we conduct ourselves is as important as the work we perform on behalf of our clients. We value integrity, excellence, innovation, and agility.

We are committed to providing a safe and healthy working environment and conduct pre-employment drug testing and background checks.

We know that how we conduct ourselves is as important as the work we perform on behalf of our clients. Our core values drive how we conduct ourselves as individuals, teams, departments and as an organization overall.

Think Like a Client

• Anticipate Needs – listen, respond & communicate proactively
• Exceed Expectations – go above and beyond
• Deliver Added Value – in everything you do

Act Like an Owner

• Think Strategically – focus on long-term benefits
• Be Fiscally Responsible – spend $/resources like it’s your own
• Own Results – be passionate, innovative, agile & resilient

Make a Difference

• In Your Work – be accountable for your attitude, effort and results
• With Your Teammates – be kind, collaborative & encouraging
• In Your Communities – embrace our mission to protect families

MIB provides competitive wages, equity, opportunities for incentives, and comprehensive total rewards as a leader in the market.

Our Total Rewards include, but are not limited to, the following benefits*:

• Medical, Dental, Vision and Rx plans 
• Variable incentive compensation plans
• Stock options
• 401(k) Retirement Savings plan with a 50% match up to 6% and a 3% non-elective contribution 
• Flexible Spending Accounts 
• Basic Life Insurance and AD&D up to 2 times base salary with supplemental options
• Short-Term & Long-Term Disability 
• Long-Term Care 
• Employee Assistance Program (EAP) 
• Auto/Home, Legal Services, Pet and Identity Theft insurance plans 
• Paid time off including vacation (3 weeks) and holidays

*Subject to change

We provide several professional development opportunities including, but not limited to:

• Continuous, on-line, self-service training platform for all associates
• Leadership Institute development program 
• Insurance industry training
• Technical/subject matter expert (SME) training and knowledge
• Development in various career fields
• Tuition reimbursement program 
• Sponsorship of professional certification exams 

We are committed to a policy of equal opportunity, without regard to race, gender, gender identity, age, religion, national origin, disability, marital status, sexual orientation, veteran status or other legally protected status, for all persons, based solely on an individual's qualifications and fitness. MIB's policy regarding equal employment opportunity applies to all aspects of employment, including, but not limited to, recruitment, hiring, benefits, wage and salary administration, scheduling, disciplinary action, termination, and social, educational and recreational programs.