Head of IT & Security

Responsibilities

• Own security governance, compliance, and IT programs end-to-end
• Serve as Information Security and Privacy Officer for SOC 2 and HIPAA
• Set security standards for application security, vulnerability management, and cloud security (AWS)
• Build and develop the IT and workforce security program, including endpoints and identity
• Manage vendor security, assessments, and BAA execution
• Lead incident response and partner with outside counsel on breach determinations
• Manage the risk register, privacy operations, and BC/DR plans
• Hire and grow the IT function

Requirements

• 8+ years of relevant security experience
• 3+ years in a security leadership role building programs from scratch
• Experience owning external audit cycles (SOC 2, ISO, PCI, or HITRUST)
• Software engineering background with ability to evaluate cloud configurations and pull requests
• Experience hiring and developing senior security or IT individual contributors
• Hands-on experience with SIEM, MDR, IDS/IPS, WAF, DLP, and vulnerability scanners
• Strong written communication skills

Benefits

• Full Medical, Dental, and Vision (up to 100% covered)
• 401K and commuter benefits
• Flexible PTO
• Stock options