Director, Security & Risk

🕒 June 15

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Equality Health

WebsiteLinkedInAll Job Openings

201 - 500 employees

🏥 Healthcare

☁️ SaaS

🤝 B2B

💰 Private equity on 2022-01

Healthcare • SaaS • B2B

Equality Health is a healthcare company that deploys a whole-person care model to help independent practices adopt and deliver value-based care for diverse communities. It provides technology (including a mobile app), care coordination, telemedicine support, and hands-on practice optimization to improve outcomes and practice performance under new payment models. The company focuses on social determinants of health, health equity, culturally competent care, risk management, and enabling providers and primary care networks to succeed in value-based arrangements.

📋 Description

• Own the enterprise security program end-to-end—strategy, roadmap, execution, and continuous improvement • Assess security posture against NIST CSF/HIPAA and peer benchmarks; maintain a multi-year strategy and roadmap • Run periodic risk assessments; maintain risk register with accountable owners and due dates • Own SIEM content, telemetry coverage, and alert fidelity; manage IDS/IPS and SOC workflows • Lead vulnerability management and drive remediation with system owners • Enforce MFA, privileged access controls, joiner/mover/leaver processes • Maintain IR playbooks; run tabletops and post-mortems • Execute TPRM lifecycle, contract security terms, and ongoing monitoring • Own the Third-Party Risk Management (TPRM) program • Budget annual plan and develop board-level reporting

🎯 Requirements

• 10+ years in information security with 5+ years leading teams or programs • 3+ years owning a security roadmap tied to business objectives, budgets, and measurable outcomes • Hands-on HIPAA/HITECH experience; familiarity with HITRUST or mapping NIST CSF to HIPAA safeguards • Practical expertise in NIST CSF, NIST 800-53, ISO 27001; third-party risk practices (SIG/SIG Lite, SOC 2) • AWS security (IAM, KMS, Security Hub, GuardDuty, VPC, WAF/Shield) • Enterprise IAM/MFA/SSO (Microsoft Entra ID/Azure AD or Okta); strong least-privilege and access review discipline • SIEM (Microsoft Sentinel and/or Splunk) content design/tuning, UEBA, runbooks, dashboarding • EDR/XDR (Microsoft Defender for Endpoint/CrowdStrike/etc.), hardening/baselines • Operational experience with Netskope and M365/Azure Purview DLP • Next-gen firewalls (Palo Alto/Fortinet), IDS/IPS, segmentation/zero trust • Incident Response & Resilience: IR playbooks, tabletop exercises

🏖️ Benefits

• Health insurance • Opportunities for professional development • Flexible work arrangements • Remote work options