Milwaukee, WI · On-site +1
Director of Information Security Remote Full time Milwaukee, Wisconsin, United States Madison ... Certifications such as CISSP, CISM, CISA, Security+, or HCISPP (Healthcare Information Security ...
Milwaukee, WI · On-site +1
Director of Information Security Remote Full time Milwaukee, Wisconsin, United States Madison ... Certifications such as CISSP, CISM, CISA, Security+, or HCISPP (Healthcare Information Security ...
$16.23 - $16.78
7% of jobs
$17.31 is the 25th percentile. Wages below this are outliers.
$16.78 - $17.34
19% of jobs
$17.34 - $17.89
5% of jobs
$17.89 - $18.44
3% of jobs
$18.44 - $19
14% of jobs
The median wage is $19.13 / hr.
$19 - $19.55
6% of jobs
$19.55 - $20.10
0% of jobs
$20.10 - $20.66
0% of jobs
$20.66 - $21.21
0% of jobs
$21.65 is the 75th percentile. Wages above this are outliers.
$21.21 - $21.76
26% of jobs
$21.76 - $22.32
20% of jobs
$16
$20
$22
As a Remote CISM, one of the main challenges is maintaining effective oversight and coordination of security policies across diverse, distributed teams and systems. Communicating complex security requirements to non-technical stakeholders, handling real-time incident responses remotely, and staying up-to-date with rapidly evolving cyber threats can also be demanding. However, strong collaboration tools, clear processes, and proactive engagement with IT and business teams make these challenges manageable. Remote CISMs often need to adapt quickly and foster a strong security culture despite not being physically present, which can build valuable leadership and influence skills for career advancement.
To thrive as a Remote CISM (Certified Information Security Manager), you need a solid background in information security governance, risk management, and incident response, supported by a relevant degree and the CISM certification. Familiarity with security frameworks such as ISO 27001, NIST, and proficiency in tools for risk assessment, SIEM, and compliance tracking are critical. Strong communication, leadership, and analytical thinking skills help in coordinating with remote teams and managing security projects effectively. These competencies are essential for ensuring robust information security controls and for successfully mitigating cyber risks in a distributed work environment.
A Remote CISM (Certified Information Security Manager) job involves overseeing and managing an organization's information security program from a remote location. Responsibilities typically include developing security policies, assessing risks, ensuring compliance, and leading incident response efforts. Remote CISM professionals collaborate with teams to protect sensitive data and mitigate cybersecurity threats while working outside of a traditional office setting. Strong communication skills, strategic planning, and knowledge of industry standards like ISO 27001 and NIST frameworks are essential.
Full-time
Posted 27 days ago
ECP is seeking a Director of Information Security to lead and execute our cybersecurity and compliance strategy. This is a hands-on role responsible for ensuring the confidentiality, integrity, and availability of our systems and customer data within the context of healthcare regulations (HIPAA) and SOC 2 Type II compliance. The ideal candidate brings a blend of technical expertise, regulatory understanding, and practical execution, partnering closely with our Infrastructure and IT teams to strengthen our security posture across the company.
You’ll manage annual audits, harden systems, guide best practices, and foster a culture of security awareness. This position reports to the VP of Engineering and collaborates cross-functionally with DevOps, Infrastructure, Compliance, and IT. Note: We are open to remote candidates located in the U.S.
Cybersecurity: Develop and execute ECP’s information security strategy, aligned with business goals and risk tolerance. Maintain and evolve SOC 2 Type II compliance, including evidence gathering, documentation, and audit coordination. Ensure compliance with HIPAA and other healthcare data protection standards.
Establish, implement, and maintain security policies, procedures, and standards consistent with regulatory and customer expectations. Manage third-party risk and vendor security assessments. Lead the incident response program, including detection, investigation, communication, and remediation.
Oversee vulnerability management, penetration testing, and security monitoring. Partner with Infrastructure and DevOps teams to secure servers, cloud environments (AWS/Azure), and CI/CD pipelines. Integrate secure development lifecycle (SDLC) practices into engineering workflows.
Stay current on emerging security threats, technologies, and frameworks, and advise leadership accordingly. IT & Platform Security: Collaborate with internal IT to harden employee laptops and mobile devices, ensuring encryption, endpoint protection, and compliance with policy. Manage and optimize the company’s mobile device management (MDM) platform.
Support and guide internal IT in maintaining secure onboarding/offboarding and access management processes. Coordinate internal penetration testing efforts and develop recommendations for infrastructure hardening. Assist with network and system security, including identity management and monitoring.
Develop and lead employee security and HIPAA awareness training programs. Maintain visibility into and tracking of vulnerabilities and remediation efforts. Requirements Bachelor’s degree in Computer Science, Information Security, or a related field (or equivalent experience).
5+ years of experience in information security, infrastructure security, or a related role. Prior experience in a SaaS or healthcare technology environment required. Demonstrated experience leading SOC 2 Type II audits and ensuring HIPAA compliance.
Strong understanding of AWS cloud security, identity and access management, and data protection best practices. Hands-on experience with endpoint management, laptop hardening, and mobile device management (MDM) tools. Strong troubleshooting, analytical, and problem-solving skills.
Excellent communication skills with the ability to work effectively across technical and non-technical teams. Ability to thrive in a collaborative, fast-paced environment. Preferred: Certifications such as CISSP, CISM, CISA, Security+, or HCISPP (Healthcare Information Security & Privacy Practitioner).
Familiarity with frameworks such as NIST CSF, CIS Controls, or ISO 27001. Experience scripting or automating security tasks (Python, PowerShell, Bash).