Remote Security Lead

Full-timeDescription At Commence, we’re the start of a new age of data-centric transformation, elevating health outcomes and powering better, more efficient process to program and patient health. We combine quality data-driven solutions that fuel answers, technology that advances performance, and clinical expertise that builds trust to create a more efficient path to quality care. With human-centered, healthcare-relevant, and value-based solutions, we create new possibilities with data. We provide proof beyond the concept and performance beyond the scope with a focus on efficiencies that transform the lives of those we serve. With a culture driven by purpose, straightforward communication and clinical domain expertise, Commence cuts straight to better care.? RequirementsThe Security Lead will establish and oversee the cybersecurity, privacy, and compliance posture for a CMS case management program. You'll serve as the primary security advisor to program leadership, working closely with the Program Manager, Solutions Architect, Cloud Architect, DevSecOps team, and government security stakeholders to ensure security is embedded into every layer of the solution. Lead the program's cybersecurity strategy and ensure compliance with CMS ARS, FISMA, HIPAA/HITECH, NIST 800-53, and FedRAMP requirementsDevelop and maintain security plans, policies, and procedures aligned to federal standardsSupport Authority to Operate (ATO) activities and coordinate with government security officials and compliance auditorsManage Plan of Action and Milestones (POA&M) activities and maintain the program risk registerReview and approve AWS cloud architecture designs, ensuring secure implementation of cloud-native services and security controlsEnforce IAM policies, MFA, encryption at rest and in transit, network segmentation, and Zero Trust principlesEmbed security controls into CI/CD pipelines and validate cloud configurations against security baselinesImplement automated scanning for source code, containers, Kubernetes workloads, Infrastructure as Code (IaC), and open-source dependenciesConduct security risk assessments and threat modeling; identify vulnerabilities and develop mitigation strategiesEvaluate third-party and integration partner security risksDefine data classification, handling, retention, and destruction requirements to protect PII and PHIReview interoperability and data-sharing solutions for HIPAA privacy complianceDevelop and maintain incident response procedures and support SIEM-based monitoring and alerting strategiesCoordinate response activities for security incidents and vulnerabilitiesParticipate in Architecture Review Boards (ARBs) and review application, integration, data, and infrastructure designs for security gapsEnsure secure API and interoperability implementations across all integrated systemsQualifications Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or related field10+ years of cybersecurity experience, including 2+ years supporting federal health programs5+ years securing cloud-based solutions, including AWSExperience supporting healthcare or CMS-related systemsExperience with ATO processes and federal compliance frameworksExperience leading security teams in Agile and DevSecOps environments  Preferred QualificationsCISSP – Certified Information Systems Security Professional Preferred *Commence' headquarters are in Virginia Beach, VA, however we are open to remote candidates in the following states:   AZ, AR, CO, DE, FL, GA, IL, IN, KS, KY, MA, MD, MI, MS, MO, MT, NC, NE, NV, NY, OH, OK, PA, SC, TN, TX, VA, DC, WI, and WV*  Work Environment/Physical Demands The work environment and physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.This is a remote position. Candidates must be able to sit, read, work on a computer, and watch a computer screen for extended periods of time. Occasionally required to stand, walk, use hands and fingers, kneel or crouch.Commence is an equal employment opportunity employer. All personnel processes are merit-based and applied without discrimination on the basis of race, color, religion, sex, sexual orientation, gender identity, marital status, age, disability, national or ethnic origin, military and veteran status or any other characteristic protected by applicable law. Commence is committed to providing equal employment opportunities to all applicants, including individuals with disabilities. If you require a reasonable accommodation to participate in the application process due to a disability, please contact Human Resources at (757) 306-4920 or hr@commence.ai.  Please note that unless you are requesting an accommodation, all applications must be submitted through our online application system.Salary Description$145,000 - $155,000