Information Security Manager (Healthcare)

Location: Remote, California required. Travel up to two weeks per quarter to visit sites.

Salary: $133,000–$157,000 annual base salary, plus a target annual bonus of 10% and potential additional incentive compensation.

Company

hirify.global provides integrated medical and social care for older adults through the Program of All-Inclusive Care for the Elderly (PACE).

What you will do

• Design, implement, and operate the organization’s information security program and HIPAA-aligned security architecture across Microsoft 365 and Meraki-based WAN environments.
• Define and maintain administrative, technical, and physical security controls while balancing risk, regulatory requirements, and operational realities.
• Monitor security tools, logs, and alerts; investigate incidents; lead incident response planning, tabletop exercises, post-incident reviews, and remediation tracking.
• Manage vulnerability assessments, enterprise security risk registers, business continuity security requirements, and disaster recovery security controls.
• Lead identity and access management, including privileged access, role-based access, joiner/mover/leaver processes, access reviews, and PHI protection.
• Develop security policies and audit processes, coordinate internal and external assessments, and manage third-party security risk and vendor monitoring.

Requirements

• Must live in California.
• Bachelor’s degree in Computer Science with an information security emphasis, or equivalent experience.
• 7+ years of progressive information security or cybersecurity experience, including hands-on implementation.
• 3–5 years leading security programs, controls, or governance functions, with experience in monitoring, incident response, or vulnerability management.
• Hands-on healthcare experience and knowledge of HIPAA, NIST, cloud environments, Microsoft 365, networking concepts, and operating systems.
• U.S. employment authorization is verified through E-Verify. Strong analytical, problem-solving, leadership, and communication skills are required.

Nice to have

• Startup experience and experience supporting audits, partner assessments, or SOC/HIPAA readiness efforts.
• CISSP, CISM, CISA, Security+, or another professional certification.
• Experience with technology managed service providers and creating technology solutions from business requirements.
• Previous remote-work experience and a strong connection to the organization’s mission.

Culture & Benefits

• Mission-driven work supporting older adults and integrated care teams.
• Medical, dental, and vision insurance, life insurance, and short- and long-term disability coverage.
• Paid parental leave, paid time off, and company-paid holidays.
• Flexible spending accounts and a 401(k) savings plan with company match.
• Vaccination, infection-control, masking, and PPE requirements may apply when working in participant care settings, with reasonable accommodations available where applicable.