About the Role
Oversee the strategy, implementation, and continuous improvement of security controls, risk frameworks, and governance protocols across technology systems and operations.
Responsibilities
- Develop and maintain comprehensive information security policies and standards
- Ensure alignment of security practices with regulatory requirements and industry standards
- Lead risk assessments and vulnerability management initiatives
- Manage third-party security reviews and vendor risk oversight
- Oversee incident response planning and coordinate with internal teams during security events
- Implement and monitor security controls for IT infrastructure and applications
- Support compliance with HIPAA, SOC 2, and other applicable frameworks
- Drive employee security awareness and training programs
- Maintain documentation for security policies, procedures, and audit readiness
- Collaborate with IT and development teams to integrate security into system design
- Monitor emerging threats and recommend proactive countermeasures
- Manage security certifications and audit processes
- Evaluate and deploy security tools and monitoring systems
- Ensure secure configuration of networks, servers, and cloud environments
- Establish and track key performance indicators for security posture
- Lead governance meetings and report security metrics to leadership
- Enforce access control policies and identity management standards
- Support data classification and protection strategies
- Promote a culture of security across departments
- Stay current with cybersecurity trends and regulatory changes
- Coordinate with legal and compliance teams on data privacy matters
- Manage encryption strategies for data at rest and in transit
- Oversee patch management and system hardening practices
- Develop and maintain business continuity and disaster recovery plans
- Ensure secure software development lifecycle practices
Compensation
Competitive salary and benefits package
Work Arrangement
Onsite
Team
Part of the technology leadership team focused on security, compliance, and risk management
Why This Role Matters
This position plays a critical role in safeguarding sensitive health information and ensuring the organization meets strict regulatory requirements while maintaining trust with patients and partners.
Work Environment
Fast-paced setting with a focus on operational efficiency, regulatory compliance, and protecting patient data through proactive security measures.
Not available