Chief Information Security Officer

About the company

At Covera, we're committed to ensuring high-quality healthcare is more than just a promise. That's why we're leading the way in the emerging science of quality, and connecting providers and payers in their shared quest to improve patient outcomes and care quality. By tackling this challenge, we have the ability to impact millions of lives by raising the standard of care nationwide.

Our initial focus is radiology, where an early and accurate diagnosis has a profound impact on the rest of a patient's care journey. Through our work, which uses clinically-validated science-based tools, we're helping doctors enhance their care, ensuring patients get the right diagnosis, and enabling the healthcare system to support quality improvement at scale.

Through our clinical intelligence platform, we have launched programs that help people access the most effective care and provide doctors with AI-powered quality insights and tools to enhance their care. Today, Covera is partnered with leading employers, payers and healthcare organizations across the US, including Walmart and Microsoft. And, with a pipeline representing over 25% of insured Americans, we are in the early stages of improving care quality for all patients across the globe.

In November 2023, Covera secured up to $50 million in a Series C extension led by Insight Partners. This capital fuels our mission to partner with healthcare providers, payers and employers to improve diagnostic care for patients everywhere.

About the role

As the Chief Information Security Officer (CISO), you will play a critical role in ensuring the security and integrity of our digital platforms and healthcare data. You will lead our efforts to establish and maintain robust security protocols, policies, and procedures to safeguard sensitive information and mitigate cybersecurity risks. This is a unique opportunity to join a dynamic team at the forefront of digital healthcare innovation and make a significant impact on the future of healthcare.

This position offers a hybrid work model with occasional in-person requirements at our NYC office.

In this role, you will be expected to:

• Develop and Implement Security Strategies: Design and implement comprehensive security strategies to protect our digital infrastructure, applications, and data assets.
• Ensure Regulatory Compliance: Stay abreast of healthcare industry regulations and standards (e.g., HIPAA, GDPR) and ensure compliance across all aspects of our operations.
• Risk Management: Identify, assess, and prioritize cybersecurity risks and develop mitigation plans to address vulnerabilities and threats.
• Security Architecture: Design and oversee the implementation of secure architecture for our digital platforms, including network security, encryption, access controls, and identity management.
• Incident Response and Crisis Management: Lead incident response efforts in the event of a cybersecurity breach or incident, including coordinating with internal teams and external stakeholders to mitigate the impact and ensure timely resolution.
• Security Awareness and Training: Develop and deliver security awareness programs and training initiatives to educate employees and stakeholders on cybersecurity best practices and procedures.
• Vendor and Third-Party Risk Management: Evaluate the security posture of third-party vendors and partners and ensure that appropriate security measures are in place to protect shared data and resources.
• Continuous Improvement: Drive a culture of continuous improvement by regularly assessing and enhancing our security posture through proactive measures, audits, and evaluations.

Your Profile:

• Minimum of 10 years of experience in information security, with at least 3 years in a leadership role overseeing cybersecurity programs and initiatives, preferably in the healthcare or technology sector.
• In-depth understanding of healthcare industry regulations and standards.
• Strong technical expertise in cybersecurity principles, technologies, and best practices, including network security, encryption, access controls, identity management, and security architecture.
• Demonstrated ability to identify, assess, and prioritize cybersecurity risks and develop effective risk mitigation strategies and controls.
• Proven leadership and communication skills, with the ability to effectively engage and influence stakeholders at all levels of the organization.
• Ability to think strategically and develop long-term security strategies aligned with business objectives and industry trends.
• Strong analytical and problem-solving skills, with the ability to analyze complex issues, identify root causes, and develop practical solutions.
• Bachelor’s degree in Computer Science, Informatio