Information Security Officer

🔥 13 hours ago

🇺🇸 United States – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 21%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

MEDvidi

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2019

🏥 Healthcare

⚕️ Healthcare Insurance

💰 $2.8M Seed Round on 2022-09

Healthcare • Healthcare Insurance • Mental Health

MEDvidi is an online mental health treatment center aiming to make professional care accessible and affordable for everyone. The healthcare experts at MEDvidi provide personalized treatment plans for a variety of mental health conditions, including ADHD, anxiety, depression, insomnia, and OCD. With services that include initial assessments, ongoing support, and medication management through virtual consultations, MEDvidi seeks to enhance mental wellness with compassionate care tailored to individual needs.

📋 Description

• Serve as MEDvidi's designated HIPAA Security Official under 45 CFR § 164.308(a)(2) • Own the security risk analysis and ongoing risk-management cycle, including maintaining the risk register and driving remediation items to closure • Develop, operate, document, and maintain HIPAA administrative safeguards • Partner with IT to implement and maintain technical safeguards for ePHI, including access controls, authentication, audit controls, data integrity, logging, and encryption • Maintain security policies for MEDvidi's distributed workforce, including workstation security, device and media controls, and remote-work ePHI handling • Own the security incident response process, including detection, containment, forensics coordination, documentation, and annual tabletop exercises • Partner with the Privacy Officer on breach investigations and overlapping privacy and security requirements • Lead vendor and Business Associate security diligence, including security questionnaires, SOC 2/HITRUST reviews, subcontractor risk, and remediation of security findings • Support security architecture and tooling decisions involving telehealth platforms, EHR access, endpoint management, logging, and SIEM coverage • Review the security implications of AI tools and AI-assisted security and compliance processes • Manage and operate MEDvidi's GRC platform in partnership with Compliance leadership • Monitor changes to the HIPAA Security Rule and help assess and implement new requirements • Establish a mature, well-documented, and operational security program during the first year • Coordinate an annual penetration test and incorporate findings into the remediation program

🎯 Requirements

• 6+ years of information security experience • 2+ years of experience in healthcare or another regulated ePHI/PII environment • Demonstrated hands-on ownership of a HIPAA security program or equivalent regulated security program; advisory-only experience is not sufficient • Strong working knowledge of the HIPAA Security Rule • Working knowledge of at least one relevant security/control framework, such as NIST Cybersecurity Framework (CSF) 2.0, NIST SP 800-66r2, or HITRUST • Demonstrated ability to independently run a security program in a lean environment • Strong risk-based prioritization, practical control implementation, and security documentation skills • Preferred: CISSP, HCISPP, CISM, or equivalent certification • Preferred: Experience securing telehealth platforms or other healthcare technology environments • Preferred: Cloud security experience with AWS, Azure, and/or GCP • Preferred: Experience leading security incident response • Preferred: Experience working with fractional or external security resources, penetration testers, and independent security advisors • Preferred: Familiarity with evolving HIPAA Security Rule requirements