Senior Director of Information Risk

Job Summary

To support the scaling of enterprise and regulated clients, the full-time remote Senior Director of Information Risk will oversee information technology risk governance, manage cross-functional governance programs, and ensure compliance with security assurance frameworks while collaborating closely with various teams to balance risk and business needs.

Key responsibilities

• Own the information-security risk register and deliver executive risk reports while driving cross-functional decision rights for risk acceptance
• Coordinate risk-balanced business prioritization by embedding security engagement in enterprise deals and product launches
• Manage the incident management program, including playbook design, escalation paths, and post-incident corrective actions

Required qualifications

• 10+ years in information-security risk management, with 5+ years in a regulated, PHI-handling environment
• Experience in senior governance or program leadership for security assurance frameworks such as SOC 2, HITRUST, or ISO 27001
• Deep understanding of HIPAA Security Rule, NIST CSF 2.0, and third-party risk frameworks
• Proven ability to translate technical issues into business-ready decisions and engage with strategic customer security teams
• Relevant certifications preferred: CISM, CRISC, CISSP, CISA, or similar