Information Security Manager

🕒 il y a 1 jour

🏄 California – Distant

🏄 California – Remote

⏰ Temps Plein

🟠 Senior

🔴 Expert

👮‍♂️ Cybersécurité / Ingénieur Sécurité

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Habitat Health

Site WebLinkedInTous les Emplois

1 - 10 employés

Fondée en 2023

🏥 Santé

⚕️ Assurance santé

🧘 Bien-être

Healthcare • Healthcare Insurance • Wellness

Habitat Health est une organisation de santé spécialisée dans l'autonomisation des personnes âgées en leur permettant de vivre de manière indépendante chez elles et dans leurs communautés. Grâce au Programme de Soins Complet pour Personnes Âgées (PACE), Habitat Health offre une couverture santé complète et des services de soins médicaux et sociaux. Leurs services incluent le transport, les soins personnels, l'accès aux soins 24h/24 et 7j/7, la kinésithérapie, le soutien nutritionnel, la pharmacie et les prescriptions, les soins médicaux et les services sociaux. Travaillant en partenariat avec des prestataires de santé réputés tels que Kaiser Permanente, Habitat Health s'engage à créer un environnement de soutien et d'inclusion tant pour les participants que pour le personnel, garantissant la prestation de soins personnalisés et coordonnés. Fondée en 2023, la société vise à améliorer la vie des personnes âgées couvertes par Medicare ou Medicaid.

Description

• Design, implement, and operate the information security program for a growing healthcare organization operating under the PACE model • Deploy HIPAA-aligned security architecture across Microsoft 365 and Meraki-based WAN • Define, implement, and maintain administrative, technical, and physical security controls • Make security design and control-selection decisions balancing risk, regulatory requirements, and operational realities • Configure and monitor security tools, logs, and alerts; analyze activity and investigate potential incidents • Serve as the primary security escalation point for internal teams and external partners • Lead incident response planning, tabletop exercises, post-incident reviews, and remediation tracking • Perform vulnerability management based on internal and external scans and coordinate remediation • Maintain the enterprise security risk register, including risk scoring, mitigation plans, and executive-level reporting • Support business continuity and disaster recovery security requirements with IT and Operations • Lead identity and access management procedures, including privileged access, role-based access controls, joiner/mover/leaver processes, and access reviews • Ensure data protection controls for PHI, including encryption, logging, and monitoring • Draft, maintain, and enforce security policies, standards, and procedures aligned to HIPAA, NIST, and partner requirements • Operate recurring security oversight and audit processes, including evidence collection and remediation tracking • Coordinate internal and external security audits, assessments, and partner security reviews • Establish and manage third-party security and risk management, including vendor risk assessments and ongoing monitoring • Partner with IT, Compliance, Legal, Clinical, and Operations teams to embed security into daily workflows

🎯 Exigences

• Bachelor’s degree in Computer Science with an emphasis on Information Security, or equivalent experience • 7+ years of progressive experience in information security or cybersecurity roles, including hands-on implementation • 3–5 years of experience owning or leading security programs, controls, or governance functions • Hands-on experience implementing information security best practices, with experience in security monitoring, incident response, or vulnerability management • Practical experience in a Health Care organization • Expertise in HIPAA, NIST, and related regulatory and standards frameworks • Experience in cloud-based environments, specifically Microsoft 365 • Experience with networking concepts, operating systems, and cloud environments • Strong analytical and problem-solving skills with attention to detail • Ability to lead through influence and communicate complex issues clearly to technical and non-technical audiences • Must live in California • Travel requirement up to 2 weeks per quarter to visit sites • Experience in a startup organization, supporting audits or security assessments, creating technology solutions based on business requirements, working remotely, or with technology managed service providers are nice to haves • CISSP, CISM, CISA, or Security+ certifications are preferred • Compliance with applicable infection control protocols, PPE requirements, and vaccination requirements associated with the role and work location • Authorization to work in the United States is verified through E-Verify

🏖️ Avantages

• Reasonable accommodation for disability, medical condition, or sincerely held religious belief, practice, or observance • Applicable vaccination and infection control policies • PPE requirements and applicable role/location-related vaccination requirements • Equal opportunity and inclusion commitment