Vice President, Information Security and IT

🕒 il y a 22 jours

🇺🇸 États-Unis – Télétravail

💵 $261 000 - $348 000 / an

⏰ Temps Plein

🔴 Expert

👮‍♂️ Cybersécurité / Ingénieur Sécurité

👻 Score fantôme 0%

Ce que ça veut dire : la probabilité que cette offre reste ouverte sans recrutement actif.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Gravie

Site WebLinkedInTous les Emplois

201 - 500 employés

Fondée en 2013

🏥 Santé

🛡️ Assurance

🤝 B2B

💰 €150 000 000 Private Equity Round - Gravie en 2025-05

Healthcare • Insurance • B2B

Gravie est une entreprise spécialisée dans les solutions d'assurance santé et de prestations qui aide les petites et moyennes entreprises, les courtiers et les employés à accéder et à gérer des prestations de santé plus flexibles et abordables. Ses offres phares incluent Comfort (un plan de santé à financement partiel), Gravie ICHRA (gestion des remboursements des frais médicaux pour les couvertures individuelles), Gravie Pay (assistance pour les coûts liés aux soins de santé) et Gravie Care. L'entreprise se concentre sur la capacité des PME à offrir des couvertures individualisées à moindre coût, tout en simplifiant la gestion des prestations.

Description

• Set cybersecurity and corporate IT strategies, priorities, and plans based on company goals, regulatory requirements, and risks • Establish security policies and controls and work with Enterprise Risk Management to identify, track, report, and address cybersecurity risks • Lead the HIPAA Security Rule program and protect ePHI and sensitive information through its lifecycle • Build capabilities in threat detection and response, identity security, security architecture and engineering, product and cloud security, vulnerability management, vendor security, security awareness, and physical security standards • Partner with Product, Engineering, and Platform teams to embed security in software, cloud environments, APIs, integrations, and production systems • Lead AI governance, including acceptable-use rules, AI-tool review and approval, data-handling requirements, risk assessments, and monitoring • Lead significant security incident response and establish cyber-resilience and technology-recovery requirements • Partner with ERM and business continuity owners on crisis planning and recovery testing • Oversee HITRUST, SOC 2, cybersecurity requirements, audits, regulatory reviews, and customer security assessments • Keep executive leadership and the Board informed about material risks, incidents, program performance, and investment needs • Represent the security program with customers, auditors, and regulators • Improve business processes and productivity through business applications, integrations, automation, and AI • Manage security and IT budgets, vendors, technology investments, team development, and performance

🎯 Exigences

• Significant cybersecurity experience, including senior leadership of a company-wide security program • Direct cybersecurity leadership experience in a HIPAA-regulated healthcare organization • Deep, practical knowledge of the HIPAA Security Rule and protecting ePHI in a covered entity or business associate environment • Experience building or improving a security program in a startup, scale-up, or other fast-moving organization with limited resources and changing priorities • Strong technical knowledge of cloud security, identity and access management, product and application security, information protection, incident response, vendor risk, and resilience • Experience working with Product and Engineering teams in cloud-based software environments • Experience with HITRUST, SOC 2, healthcare audits, and security reviews for enterprise customers • Experience leading corporate IT for a distributed workforce, including business applications, endpoints, identity, employee support, and IT service delivery • Practical experience with AI governance and with using business applications, automation, integrations, APIs, and AI tools to improve workflows and productivity across a company • Strong leadership and communication skills, including experience developing teams, managing budgets and vendors, handling major incidents, and presenting risks and recommendations to executives and the Board • Authorization to work in the United States is required • Must answer whether employer visa sponsorship is required

🏖️ Avantages

• Offers equity • Offers bonus • Alternative medicine coverage • Flexible PTO • Up to 16 weeks paid parental leave • Paid holidays • 401k program • Transportation perks • Education reimbursement • 2 days of paid paw-ternity leave • Standard health and wellness benefits