Director of Information Security

Job Summary

Director of Information Security is a full-time remote position responsible for building and overseeing the enterprise security posture, focusing on protecting sensitive patient data and achieving HITRUST Certification.

Key Responsibilities

• Develop and implement security processes and technical controls to safeguard patient data
• Lead the organization towards HITRUST Certification within a 12-24 month roadmap
• Balance engineering and governance to ensure effective security practices in healthcare

Required Qualifications

• 10+ years of experience in Information Security with proven audit success in HITRUST CSF or SOC2 Type II certifications
• Expert-level knowledge of HIPAA and familiarity with 42 CFR Part 2 regulations
• Experience in a Series C+ environment, building security programs from the ground up
• Strong background in AppSec and SecOps, with the ability to communicate effectively with technical and executive teams
• Certifications such as CISSP, CISM, or CCSFP are highly desirable