Назад
Company hidden
7 дней назад

Director, Information Security (Healthcare)

188 000 - 245 000$
Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
director
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Director, Information Security (Healthcare): Leading a global security program protecting sensitive fertility and family-care data, with an accent on corporate security, product security, compliance, and executive risk management. Focus on building a mature security roadmap, strengthening cloud and application safeguards, preparing for audits, testing incident response, and developing the security team.

Location: Remote

Salary: $188,000–$245,000 base salary annually

Company

hirify.global is a global fertility and family-care platform supporting members through fertility, family-building, menopause, and related life stages.

What you will do

  • Set the security strategy, maturity roadmap, investment priorities, and progress reporting for executive leadership.
  • Own corporate and product security programs, including GRC, incident response, security awareness, vendor risk, application security, cloud security, infrastructure security, and secure SDLC.
  • Partner with Engineering and IT to build security into system design, development, and operations.
  • Lead risk assessments, vulnerability reduction, security reviews, tabletop exercises, and post-incident learning.
  • Own SOC 2 Type II, HITRUST, PCI DSS, HIPAA, and future ISO 27001 readiness activities.
  • Build and coach the security team, manage budgets and vendors, and represent security requirements in executive and customer conversations.

Requirements

  • 10+ years of technology experience, including 5+ years in information security and at least 3 years leading security teams.
  • Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent experience.
  • CISSP, CISM, or a comparable security certification.
  • Experience leading security at a late-stage startup, scale-up, or public company.
  • Working knowledge of HIPAA, GDPR, CCPA/CPRA, SOC 2 Type II, HITRUST, PCI DSS, and ISO 27001.
  • Strong knowledge of application, network, and cloud security, including AWS, Azure, NIST CSF, OWASP, incident response, risk management, vulnerability management, penetration testing, and security awareness.

Nice to have

  • Experience leading security through an IPO, acquisition, or major audit cycle.
  • Background in healthcare, digital health, or another highly regulated environment.
  • Experience in a remote-first, globally distributed company.
  • Familiarity with Drata or other compliance automation platforms.
  • Experience building security engineering practices with platform and infrastructure teams.

Culture & Benefits

  • Mission-driven work expanding access to fertility and family-forming care globally.
  • Flexible time off, comprehensive parental leave, and family-forming benefits.
  • Health and wellness benefits, retirement savings plans, short- and long-term incentives, and equity.
  • Collaborative, inclusive, and values-driven work environment.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →