Director of Security & IT

Responsibilities

• Lead the design and implementation of a comprehensive security program including application security, infrastructure security, and incident response
• Develop and maintain security policies aligned to SOC 2 Type II and HIPAA requirements
• Own SOC 2 Type II compliance initiatives, including audit preparation and evidence collection
• Oversee day-to-day IT operations and lead the internal IT help desk function
• Manage identity and access management (IAM) strategy and least-privilege access controls
• Evaluate and manage relationships with cloud providers and third-party vendors for security compliance
• Partner with Engineering on cloud security, infrastructure hardening, and disaster recovery
• Lead, mentor, and develop a team of security, IT, and compliance professionals

Requirements

• 10+ years of experience in security, IT infrastructure, and compliance
• 3+ years in a security leadership capacity
• Experience at a scaling software or AI company (50-1,000 employees)
• Proven depth in HIPAA compliance and SOC 2 Type II audits
• Strong understanding of AWS cloud security architecture and network security
• Experience building or maturing security and compliance programs
• Experience in healthcare, benefits, fintech, or other highly regulated environments
• Strong people leadership and technical team management skills

Preferred Qualifications

• Relevant certifications such as CISSP, CISM, CCSP, or AWS Certified Solutions Architect
• Hands-on technical capability to engage in architecture discussions and assess technical risk
• A bias toward simplicity and prioritization in risk reduction

About the Company

Founded in 2019, Nayya is on a mission to connect people’s most important information, so they can thrive in their health and wealth. Powered by AI and advanced analytics, Nayya’s platform transforms complex benefits experiences into intuitive, seamless, and ongoing interactions.