Senior Director, Information Security

At Kyruus Health, our mission is to connect people to the right care, in pursuit of our vision: a better healthcare system- one that's transparent and accessible- where everyone gets the care they need. Our values are at the heart of everything we do:
We care deeply – We do the right thing even if it’s the harder thing. We are fiercely driven – We harness our curiosity to pursue continuous improvement and create simple solutions to complex problems.We lead with respect – We celebrate the individual traits that make each of us unique and seek out diverse voices to listen and learn.We are accountable – We do what we promise for each other and our customers.
Here’s what that would mean for you in the Senior Director, Information Security role.Care:  By prioritizing the security and privacy of our customer's data, this role embodies our commitment to doing the right thing, ensuring the well-being of our customers and their trust in our services.Driven:  Leveraging a deep-rooted drive for excellence, the Senior Director, Information Security  will continuously innovate and enhance our security landscape to solve complex challenges with deceptively simple, robust security solutions.Respect:  Championing leadership that values and integrates the multiple perspectives and experiences of our team, this role advances our goal of security through strength in diversity.Accountable:  By taking ownership of Kyruus’ comprehensive security vision and executing strategies to the highest degree of promise, this leadership secures the future and the data of our company and customers.

What you will do in a Senior Director, Information Security role at Kyruus Health:

• Strategic leadership and Vision: Develop a forward-looking information security strategy that aligns with business goals, emphasizing innovation in security practices to protect against evolving threats.
• Team Management and Development: Lead, mentor, and grow the Information Security team, fostering a culture of excellence, agility, and continuous improvement.
• Application Security: Oversee the security of applications and infrastructure, integrating secure design principles across the development lifecycle and operational practices.
• Cloud Security Expertise: Oversee the security of applications and infrastructure within GCP and AWS, ensuring the implementation of best practices in cloud security and compliance.
• Security Architecture and Policy Development: Direct the creation of security architectures and frameworks. Formulate and enforce security policies and procedures to ensure compliance with regulatory standards and industry best practices.
• Advanced Threat Detection and Monitoring: Champion advanced technologies and methodologies for threat detection and monitoring, proactively identifying and mitigating potential security threats.
• Incident Response Management (SecOps): Lead a comprehensive incident response program, ensuring effective management and mitigation of security incidents.
• Vulnerability Management and Risk Assessment: Establish a vulnerability management program, conducting risk assessments to prioritize security efforts effectively.
• Security Automation and Process Improvement: Advocate for the automation of security processes to enhance efficiency and security posture. Ensure seamless integration of security within CI/CD pipelines for secure, compliant software delivery.
• Stakeholder Engagement and Communication: Be an excellent partner, collaborator and principal security advisor with your x-stakeholders, including senior management, offering strategic insights on our security landscape.
• Information Security Compliance and Certification Leadership: Collaborate with other compliance-focused leadership roles on the team to ensure a cohesive approach to compliance with regulatory requirements and industry standards and participate in achieving and maintaining compliance with critical healthcare regulatory frameworks, such as SOC2, HIPAA, HITRUST, and FedRamp. Support certification efforts to reinforce our commitment to data security and privacy, enhancing trust with customers and partners.
• IT security: Partner with IT functions to ensure the integrity, confidentiality, and availability of information assets by managing IT security practices, including network security, endpoint protection, and access control systems.
• Role Model and People Leader: You will align with our core values and be passionate about being a people leader, mentor, and a multiplier to your team.
• Innovate and Drive Change: Have the opportunity to harness your curiosity and fiercely driven nature to lead key security innovation projects, directly contributing to Kyruus Health's mission and shaping the future of healthcare technology security.
• Cross-Functional Collaboration: By working clo