Dir, Security Operations (Healthcare)

Salary: $169,000–$227,000 annually

Company

hirify.global operates a distributed healthcare ecosystem supporting dental and medical practices, clinical and business applications, connected devices, support centers, and third-party partners.

What you will do

• Define and improve an intelligence-led security operations program covering networks, endpoints, cloud and SaaS, applications, AI systems, web assets, and the human layer.
• Maintain 24x7 monitoring, triage, escalation, incident response, and cyber crisis management for ransomware, identity compromise, data exposure, cloud, supply-chain, and business email compromise events.
• Lead threat intelligence, detection engineering, threat hunting, vulnerability management, exposure management, attack-surface management, and penetration testing.
• Establish security governance for AI systems, automation, robotic process automation, and low-code/no-code development.
• Oversee security platforms including SIEM, SOAR, endpoint and network detection and response, email security, case management, and cloud security posture management.
• Build the security organization, manage budgets and vendors, brief executives, and embed patient safety, care continuity, and recovery requirements into security decisions.

Requirements

• Bachelor’s degree in cybersecurity, information security, computer science, engineering, or a related discipline, or equivalent progressive experience.
• 10+ years of progressive experience in security operations, information security, technology risk, or security engineering, including 5+ years in a security leadership position.
• Healthcare experience protecting electronic protected health information and clinical environments is required.
• Experience leading risk assessments and control validation against HIPAA/HITECH, HITRUST CSF, ISO/IEC 27001, PCI DSS, and NIST frameworks.
• Two or more information security certifications such as CISSP, CISM, CISA, or HCISPP.
• Experience leading major cyber incidents and operating security services across cloud, SaaS, endpoint, identity, network, application, and third-party environments.

Nice to have

• Master’s degree in cybersecurity, information security, computer science, engineering, or a related discipline.
• Experience with ISO/IEC 27001-certified, HITRUST-certified, or formal control assurance environments.
• Certifications such as CRISC, CCSP, HCISPP, or GIAC.
• Experience with electronic health records, clinical applications, connected medical or dental technologies, and mixed modern and legacy environments.

Culture & Benefits

• Medical, dental, and vision insurance.
• Paid time off and paid time to volunteer in the local community.
• Tuition reimbursement.
• 401(k) plan.
• Emphasis on diversity, accountability, continuous learning, and patient-care continuity.