Description

Job Summary:

Key responsibilities include leading security strategy, methodologies, and standards for complex IT initiatives across multiple security domains, ensuring alignment with enterprise strategy and organizational KPIs. The Director will drive workforce planning, talent acquisition, and capability building at scale, addressing skill and knowledge gaps through talent development, managed-service partnerships, and vendor relationships. Additionally, the role involves partnering with cross-functional IT and business stakeholders, serving as an escalation point for risks and dependencies, and advising executive leadership on remediation and continuous improvement.

This director will be responsible for scaling and operating offshore, onshore, and global delivery models. The ideal candidate will have a background in global delivery operations, workforce and capacity planning, and vendor or managed-service partnerships.

• Establish a centralized contingent workforce strategy and governance model including effective offshoring
• Implement standardized processes for vendor selection, rate benchmarking, and contract management
• Drive cost optimization through vendor consolidation and rate negotiations
• Introduce reporting frameworks and dashboards for spend, performance, and utilization

This managing level position oversees the development, implementation and maintenance of assigned ITRM process and/or service portfolio by working collaboratively with leadership to develop the ITRM strategy. This role is responsible for staying current with industry trends, benchmarks, and best practices and providing guidance when difficult decisions need to be made.

Essential Responsibilities:

• Directs the operation of multiple units and/or departments by identifying customer and operational needs; analyzing resources, costs, and forecasts and incorporating them into business plans; gaining cross-functional support for business plans and priorities; translating business strategy into actionable business requirements; obtaining and distributing resources; setting standards and measuring progress; removing obstacles that impact performance; guiding performance and developing contingency plans accordingly; and ensuring products and/or services meet customer requirements and expectations while aligning with organizational strategies.
• Demonstrates continuous learning and maintains a highly skilled and engaged workforce by aligning resource plans with business objectives; overseeing the recruitment, selection, and development of talent; motivating teams; preparing individuals for growth opportunities and advancement; staying current with industry trends, benchmarks, and best practices; providing guidance when difficult decisions need to be made; and ensuring performance management guidelines and expectations drive business objectives and results.
• Effectively communicates technical security findings to non-technical audiences.
• Leads and assists in the development of project strategies, methodologies, and standard processes for moderately to highly complex IT initiatives across multiple security domains by analyzing business and technology requirements to ensure testability and traceability.
• Reviews and signs off on project (e.g., testing, requirements documentation, logical models, etc.) scope and approach, and partners with cross-functional IT and business stakeholders to review and approve the overall project approach.
• Researches and stays abreast of industry trends, emerging threats, best practices, and cutting edge techniques to creatively discover and exploit vulnerabilities, and recommend security solutions for technology systems.
• Serves as an escalation point on issues, dependencies, and risks related to security testing.
• Determines if the necessary skills and knowledge required to meet ongoing and changing business demands exists across business or technical domains, and ensures skill and knowledge gaps are closed through talent development and outsourcing as appropriate.
• Leverages partnerships between security consultants, Program/Project Managers, and other IT planning leaders to drive workforce planning efforts.
• Approves and directs additional staff augmentation through managed service agreements as needed.
• Oversees budgets and capital planning across departments and annual business cycle levels as appropriate.
• Oversees the implementation of and adherence to standardized security tools, templates, and processes to support continuous process improvement across business domains.
• Recommends and advocates for regional and national process or solution design improvements which align with sustainable best practices, and the strategic and tactical goals of the business.
• Provides insight and guidance to ensure solutions are aligned with business strategies, operational work flow, established budgets, and vendor service level agreements.
• Develops trends and high level themes related to lessons learned, and communicates this feedback to stakeholders, leadership, and the larger information security community.
• Collaborates with cross-functional IT teams to gain buy-in and approval of test plans, and tracks quality metrics across testing phases (e.g., SIT, Performance, UAT, Automation, Production, Validation).
• Ensures KPIs are defined, up-to-date, and aligned to higher level organizational KPIs.
• Drives the development of cyber security intellectual capital by leading process or procedure improvements, consulting on brown bag training sessions, and leading the development of new training documents.
• Directs information sharing and integration procedures across cyber security to ensure the exchange of threat intelligence and cyber security vulnerability assessment data.
• Provides insight and influence to executive management and business leaders on how to remediate issues identified through security testing processes.
• Reviews, evaluates, and prioritizes value gaps and opportunities for process enhancements or efficiencies.
• Establishes a network of partnerships with technology risk teams and business stakeholders to respond to and remediate identified issues, and ensure the best approach for improving security posture.

Knowledge, Skills and Abilities: (Core)

• Ambiguity/Uncertainty Management
• Attention to Detail
• Business Knowledge
• Communication
• Constructive Feedback
• Critical Thinking
• Cross-Group Collaboration
• Decision Making
• Dependability
• Diversity, Equity, and Inclusion Support
• Drives Results
• Facilitation Skills
• Health Care Industry
• Influencing Others
• Integrity
• Leadership
• Learning Agility
• Organizational Savvy
• Problem Solving
• Short- and Long-term Learning & Recall
• Strategic Thinking
• Team Building
• Teamwork
• Topic-Specific Communication

Knowledge, Skills and Abilities: (Functional)

• Advanced Hacking
• Analytical Skills
• Application Design, Architecture
• Application Development (Web)
• Business Case Development
• Business Planning
• Client Focus
• Conflict Resolution
• Cross Department Coordination
• Cybersecurity Event Correlation Tools
• Debugging and Troubleshooting
• Delegation
• Demonstrating Personal Flexibility
• Financial Acumen
• Goal Setting
• IT Quality Assurance
• Information Security Management
• Innovative Mindset
• Key Performance Indicators
• Low-Level Programming
• Malicious Code Analysis
• Managing Diverse Relationships
• Mentoring and Coaching
• Negotiation
• Network Security
• Organizational Skills
• Penetration Testing
• Prioritization
• Project Management
• Project Management Tools
• Requirements Elicitation & Analysis
• Technical Communication

Minimum Qualifications:

• Minimum three (3) years informal leadership experience with or without direct reports.
• Minimum four (4) years managing operating budgets and/or project financials.
• Bachelors degree in Business Administration, Computer Science, Social Science, Mathematics, or related field and Minimum eight (8) years experience in IT or a related field, including Minimum six (6) years in information security. Additional equivalent work experience may be substituted for the degree requirement.

Preferred Qualifications:

• Four (4) years of work experience in a role requiring interaction with executive leadership (e.g., Vice President level and above)
• Two (2) years experience overseeing projects or programs requiring the integration of cross-functional technology and/or business solutions.
• Two (2) years experience in risk management, governance, or compliance.
• Two (2) years experience in business continuity, crisis management, or disaster recovery.
• Two (2) years experience in financial or statistical modeling (e.g., net present value, options analysis, Monte Carlo analysis, linear regression).
• Master's degree in Business Administration, Computer Science, Social Science, Mathematics, or related field.

Primary Location: California,Pleasanton,Pleasanton Tech Cntr Building E
Scheduled Weekly Hours: 40
Shift: Day
Workdays: Mon, Tue, Wed, Thu, Fri
Working Hours Start: 08:00 AM
Working Hours End: 05:00 PM
Job Schedule: Full-time
Job Type: Standard Worker Location: Flexible
Employee Status: Regular
Employee Group/Union Affiliation: NUE-NCAL-09|NUE|Non Union Employee
Job Level: Director/Senior Director
Department: Oakland Reg - 1950 Franklin - RGNL MG-Techgroup-Opms-Tech - 0206
Pay Range: $193800 - $250800 / year Kaiser Permanente strives to offer a market competitive total rewards package and is committed to pay equity and transparency. The posted pay range is based on possible base salaries for the role and does not reflect the full value of our total rewards package. Actual base pay determined at offer will be based on labor market data, internal alignment, and a candidate's years of relevant work experience, education, certifications, skills, and geographic location. Travel: No Flexible: Work location is on-site at a KP location, with the flexibility to work from home. Worker location must align with Kaiser Permanente's Authorized States policy. Kaiser Permanente is an equal opportunity employer committed to fair, respectful, and inclusive workplaces. Applicants will be considered for employment without regard to race, religion, sex, age, national origin, disability, veteran status, or any other protected characteristic or status.
Requisition #: 1434409

bx2d9wfr1