Director of Security

Vaga não está no LinkedIn

🕒 Dezembro 17, 2025

Candidatar-se

Encontrar Vagas Remotas Similares

Receber Emails de Vagas Remotas

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo

OneStudyTeam

SiteLinkedInTodas as Vagas

201 - 500 funcionários

⚕️ Seguro de Saúde

🧬 Biotecnologia

💊 Farmacêutico

Healthcare Insurance • Biotechnology • Pharmaceuticals

OneStudyTeam é uma empresa que fornece a plataforma StudyTeam, uma solução baseada na nuvem projetada para facilitar o processo de ensaios clínicos para sites de pesquisa e patrocinadores. A plataforma melhora a gestão de recrutamento de pacientes ao simplificar os fluxos de trabalho dos sites e oferecer insights em tempo real sobre dados de recrutamento e inscrição. Usada globalmente por mais de 10. 000 sites de pesquisa e confiada pelos principais patrocinadores biofarmacêuticos, a OneStudyTeam visa melhorar a eficiência dos ensaios clínicos e reduzir a carga sobre os sites de pesquisa.

Descrição

• Lead and manage the GRC and Security Engineering teams, including strategy, objectives, staffing, coaching, and performance management. • Own governance, risk, and compliance programs. Maintain ISO 27001 and related controls. Drive audit readiness for HIPAA and other frameworks. Coordinate policy lifecycle management and control testing. • Run vendor assessment and qualification program. Oversee third party risk management, due diligence, contractual security requirements, and continuous monitoring. • Provide AI related security assessments and guidance. Establish acceptable use guardrails for AI, assess model and data risks, and advise on controls for AI enabled solutions. • Oversee security architecture for cloud environments and enterprise platforms. Partner with engineering on secure design for AWS, Azure, identity, network, and data protection. • Direct security engineering operations. Manage EDR and threat detection with CrowdStrike, SIEM operations, CSPM posture management, vulnerability management, and SOAR automation. • Lead incident response readiness and execution. Run tabletop exercises, coordinate investigations, and deliver root cause and lessons learned. • Own and manage security budgets, multiyear planning, vendor contracts, and cost optimization while meeting control objectives. • Report program status and risk posture to executives and the board. Define and track KPIs and KRIs. Communicate clearly with technical and non technical stakeholders. • Establish and enforce secure software development practices and SDLC controls with engineering leadership. • Maintain a current security roadmap and maturity plan aligned to business priorities. • Oversee metrics, dashboards, and reporting for program performance and risk reduction. • Coordinate with Legal, Privacy, and Compliance on regulatory obligations and customer security assessments. • Champion security awareness training and culture, sponsor targeted training for engineering and high risk roles. • Evaluate, select, and manage strategic security vendors and platforms, drive successful implementations and integrations. • Represent security in customer meetings and due diligence, provide credible technical and compliance answers.

🎯 Requisitos

• 15+ years of progressive experience in information security or related fields. • 10+ years of management experience leading security teams, including people leadership and program ownership. • Bachelor's degree in Computer Science, Engineering, Information Security, or related field. • Relevant certifications strongly preferred. Examples include CISSP and CISM. • Proven leadership of security programs at enterprise scale. Ability to set strategy, drive execution, and deliver measurable outcomes. • Demonstrated expertise in governance, risk, and compliance programs, including driving the implementation of ISO27001, SOC2, or HITRUST certification. • Experience with AI security risk management, data protection for AI use cases, and acceptable use guardrails for AI and large language models. • Strong background in secure software development, application security, and SDLC controls, including threat modeling and secure coding practices. • Hands-on knowledge of cloud security for AWS and Azure, identity and access management, network security, data protection, and key management.

🏖️ Benefícios

• We value diversity and believe the unique contributions each of us brings drives our success. We do not discriminate on the basis of race, sex, religion, color, national origin, gender identity, age, marital status, veteran status, or disability status. • As a condition of employment, you will abide by all organizational security and privacy policies. • This organization participates in E-Verify (E-Verify's Right to Work guidance can be found here).