Director of IT & Security, CISO

Security Strategy & Leadership:

• Own end-to-end information security strategy across cloud, application, infrastructure, and corporate environments.
• Define a pragmatic security roadmap aligned to business risk, regulatory requirements, and engineering velocity.
• Act as a trusted advisor to the CTO and executive team on security, risk, and operational tradeoffs.

Cloud, Application & Infrastructure Security:

• Own security architecture and operations for a primarily AWS-based environment.
• Lead application security programs, including secure SDLC, dependency scanning, SAST/DAST, penetration testing, and vulnerability management.
• Own identity and access management strategy with Okta as the backbone.

Required Skills & Experience:

• 10+ years in information security, IT, or related technical leadership roles, including 5+ years of people management, ideally in healthcare technology SaaS.
• Proven experience leading security engineering, security operations, and corporate IT in a cloud-native SaaS environment.
• Direct experience in healthcare or other highly regulated industries.