Director, Security & Risk

🕒 June 15

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Equality Health

WebsiteLinkedInAll Job Openings

201 - 500 employees

🏥 Healthcare

☁️ SaaS

⚕️ Healthcare Insurance

💰 Private equity on 2022-01

Healthcare • SaaS • Healthcare Insurance

Equality Health is simplifying value-based care and building pathways to better health outcomes for Medicaid and historically under-resourced communities. The company integrates data-driven technology (CareEmpower®), skilled practice coaching, and patient engagement to support providers, health plans, and members. Equality Health focuses on enabling equitable, value-based care through software, practice transformation, and partnerships with payers and providers to improve individual and population health outcomes.

📋 Description

• Own the enterprise security program end-to-end—strategy, roadmap, execution, and continuous improvement • Assess security posture against NIST CSF/HIPAA and peer benchmarks; maintain a multi-year strategy and roadmap • Publish and enforce policies/standards; ensure audit readiness and version control • Run periodic risk assessments; maintain risk register with accountable owners and due dates • Own SIEM content, telemetry coverage, and alert fidelity; manage IDS/IPS and SOC workflows • Lead vulnerability management (scan cadence, SLAs, change control alignment) and drive remediation with system owners • Maintain IR playbooks; run tabletops and post-mortems; document BC/DR testing cadence • Deliver security awareness (phishing simulations, targeted training) and coaching for secure-by-default patterns • Own the Third‑Party Risk Management (TPRM) program: intake, inherent risk scoring, and ongoing monitoring • Budget: Own annual plan and budget; develop board-level reporting with KPIs/OKRs

🎯 Requirements

• 10+ years in information security with 5+ years leading teams or programs (operations, engineering, or GRC) • 3+ years owning a security roadmap tied to business objectives, budgets, and measurable outcomes • Hands-on HIPAA/HITECH experience; familiarity with HITRUST or mapping NIST CSF to HIPAA safeguards • Practical expertise in NIST CSF, NIST 800-53, ISO 27001; third-party risk practices • AWS security (IAM, KMS, Security Hub, GuardDuty, VPC, WAF/Shield) • Enterprise IAM/MFA/SSO (Microsoft Entra ID/Azure AD or Okta) • SIEM (Microsoft Sentinel and/or Splunk) content design/tuning • EDR/XDR (Microsoft Defender for Endpoint) and email security with Mimecast • Next‑gen firewalls (Palo Alto/Fortinet) • Incident Response & Resilience knowledge

🏖️ Benefits

• Flexible work arrangements • Professional development opportunities