Senior Security Manager, Data Protection

As the Senior Security Manager for Data Protection, you will lead by being a highly technical leader who delivers high business impact on projects of increasing dependencies and ambiguity.
You will lead a team of individual contributors focused on protecting patients, our employees, and Aledade as a whole. You will build a comprehensive program and processes to enable secure access to Aledade’s data, including PHI, PII etc. You will work with cross-functional stakeholders and teams to establish design and implementation guidance and standards and manage project to completion for assuming the end to end data lifecycle protections.
At Aledade, we empower primary care physicians with technology to keep their patients healthy, preventing unnecessary hospitalizations.

Primary Duties

• Build a high performing team by hiring and nurturing security talent.
• Strong technical leadership - drive technical solutioning and building roadmaps to reduce or manage security risk.
• Set aggressive and clear goals and remove all roadblocks for the team to achieve them.
• Working seamlessly and collaboratively with stakeholders across Aledade to achieve business outcomes.
• Work closely with other leaders to drive excellence in our processes and systems.

Minimum Qualifications

• BS (or higher) in Computer Science, Cybersecurity, Engineering, or equivalent experience
• 10+ years of experience in designing, building, or operating data protection services 
• 3+ years of experience in cybersecurity engineering
• 3+ years of experience with AWS, GCP, Azure, or another cloud service

Preferred KSA’s

• Prior experience or extensive knowledge of securing PHI data in a healthcare organization required.
• You have experience in attracting, hiring, and coaching world-class engineers including performance management
• You have experience in taking ownership of the technology decisions, while delegating and empowering team members.
• You enjoy breakdowning down ambiguous and/or complex problems and creating detailed, high-quality solutions and design deliverables 
• You have experience communicating analysis and establishing confidence among audiences who do not share your disciplinary background or training.
• You have strong communication and relationship building skills, with experience influencing and aligning multiple stakeholders

Domain Specific KSA's
Data Security 
• Experience in managing and supervising other Sr Data Security Engineers 
• Experience in developing and managing data protection programs focused on data discovery, data inventory, data risk assessments, and encryption for enterprise environments
• Proficiency in secure configuration, troubleshooting, and system hardening
• Proven experience with data discovery, classification, handling, access, inventory, and retention
• Proven experience with data protection technologies (security posture management cloud or data, encryption, tokenization, data loss prevention tools and data masking/anonymization techniques)
• Experience securing an ML, SaaS, or other data-focused platforms (ex. Tableau, Salesforce, AWS, or Databricks)
• Proficiency in SaaS Data Security, knowledge of secure cloud architecture design, cloud data protection mechanisms, and cloud identity and access management (IAM).
• Experience with cloud native application development and security models, particularly in AWS or Azure.
• Programming and Scripting Experience ( Python, PowerShell, Shell Scripting, Ruby, Go).
• Experience with data protection and governance technologies, e.g., Data Discovery, Data Inventory/Catalogs, Certificate and Key Management, Database Encryption, and Database Activity Monitoring.
Core Compentencies
• Strong analytical and problem-solving skills 
• Strong data modeling skills and data governance skills
• Excellent communication for effective stakeholder engagement 
• Ability to breakdown complex problems and create detailed, high-quality solutions and design deliverables 
• Ability to excel in fast-paced, startup-like environments 

Physical Requirements

• Sitting for prolonged periods of time. Extensive use of computers and keyboard. Occasional walking and lifting may be required.

Who We Are:Aledade, a public benefit corporation, exists to empower the most transformational part of our health care landscape - independent primary care. We were founded in 2014, and since then, we've become the largest network of independent primary care in the country - helping practices, health centers and clinics deliver better care to their patients and thrive in value-based care. Additionally, by creating value-based contracts across a wide variety of health plans, we aim to flip the script on the traditional fee