Director of IT Security Operations

Job Summary

Leading the security and compliance initiatives, the full-time remote Director of IT Security Operations will manage the controls for HIPAA and SOC 2 Type 2 compliance, oversee corporate IT operations, and ensure the security posture of the company's clinical-trial platform.

Key responsibilities

• Operate and evidence controls for SOC 2 Type 2 and HIPAA compliance, coordinating audits and maintaining risk assessments
• Enforce data protection measures and access management protocols, including role-based access control and data-leakage controls
• Manage cloud infrastructure as code and oversee vulnerability and patch management processes to ensure system integrity

Required qualifications

• Deep understanding of operations, systems, network, and cloud security
• Experience with SOC 2 Type 2 and HIPAA compliance in a regulated data environment
• Hands-on experience with identity and access management and infrastructure as code (Terraform)
• Proficiency in SIEM and security monitoring of cloud environments, preferably AWS
• Bachelor's degree in computer science, software engineering, or equivalent experience