Director of IT & Security, CISO

🕒 March 12

🇺🇸 United States – Remote

💵 $224k - $260k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 34%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Redox

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2014

🏥 Healthcare

⚕️ Healthcare Insurance

☁️ SaaS

Healthcare • Healthcare Insurance • SaaS

Redox is a company specializing in healthcare data interoperability. It provides a platform that facilitates real-time data exchange for vendors, providers, and payers in the healthcare industry. With over 7,300 connected healthcare organizations, Redox enables efficient data exchange and processing, helping to improve patient care and streamline operations. The platform supports massive data transactions, maintains high uptime, and is certified for security standards like HITRUST. Redox is renowned for integrating EHR systems, improving AI and machine learning outcomes, and enhancing patient and member experiences. Its solutions are trusted by key players in the healthcare sector to manage and consolidate healthcare data effectively.

📋 Description

• Own end-to-end information security strategy across cloud, application, infrastructure, and corporate environments. • Define a security roadmap aligned to business risk, regulatory requirements, and engineering velocity. • Serve as executive owner for security posture, risk management, and incident response; advise the CTO and executive team. • Drive a DevSecOps-first operating model across CI/CD pipelines, infrastructure as code, and developer workflows. • Lead threat modeling, secure design reviews, risk assessments, policy-as-code, guardrails, and automation. • Own security architecture and operations for a primarily AWS-based environment. • Lead application security programs including secure SDLC, dependency scanning, SAST/DAST, penetration testing, and vulnerability management. • Own identity and access management strategy with Okta. • Build and run security operations covering monitoring, investigation, incident response, and post-incident learning. • Run tabletop exercises and improve response playbooks. • Manage vendor relationships including CrowdStrike, Flashpoint, RAD, and Okta. • Own corporate IT strategy and execution, including end-user computing, device management, endpoint security, identity lifecycle management, access controls, email, collaboration tools, endpoint management, and SaaS access governance. • Drive automation and standardization across onboarding, offboarding, access management, and device lifecycle. • Partner with People Ops, Legal, and Finance on IT processes, audits, and vendor management. • Own healthcare-related security and compliance programs such as HIPAA and SOC 2. • Lead third-party risk management and vendor security reviews. • Support customer security reviews and serve as an executive security contact. • Build, lead, and mentor a team spanning security engineering, security operations, and IT. • Establish clear ownership, measurable outcomes, and high operational standards.

🎯 Requirements

• 10+ years in information security, IT, or related technical leadership roles, including 5+ years of people management, ideally in healthcare technology SaaS. • Proven experience leading security engineering, security operations, and corporate IT in a cloud-native SaaS environment. • Direct experience in healthcare or other highly regulated industries. • Track record of successfully implementing DevSecOps practices. • Deep hands-on experience securing AWS environments. • Strong understanding of endpoint security, identity systems, and modern SaaS IT stacks. • Practical knowledge of tools such as CrowdStrike, Okta, Flashpoint, RAD, and related platforms. • Strong foundation in application security, cloud security, and infrastructure as code. • Proven proficiency in AI tools and techniques, including prompt engineering and hands-on experience across multiple large language model platforms, with a demonstrated ability to drive AI adoption enterprise-wide. • Strong collaborator with engineering, platform, and operations teams. • Clear, direct communicator who can articulate risk without theatrics. • Comfortable making tradeoffs and prioritizing based on real-world risk. • Builder mindset with a bias toward automation and scale. • Preferred: Proven experience securing autonomous agentic loops and tool-calling frameworks; understanding of Indirect Prompt Injection and Human-in-the-Loop guardrails. • Preferred: Expertise securing the Model Context Protocol (MCP), including context isolation, sandboxing, and identity propagation. • Preferred: Experience migrating security programs to Vanta or similar automated GRC platforms and architecting continuous compliance. • Preferred: Hands-on application of NIST AI RMF and OWASP Top 10 for LLMs in production. • Required software: CrowdStrike, AWS, Okta. • Successful candidates must be eligible to be employed in the U.S. and must reside & work in the continental U.S.

🏖️ Benefits

• 100% remote first culture (must be based in the US) • Unlimited Flexible Time Off • 15+ Observed Holidays • Rest & R^Charge days (guaranteed a 3-day weekend each month) • R^Charge (6 weeks paid sabbatical + stipend) • 401k match 50% for up to 8% on Day 1 • Medical/Dental/Vision Benefits on Day 1 • HSA & FSA, Life, Disability, Medical Travel & Employee Assistance Program • Paid Parental Leave (16 weeks) • Productivity Stipend & Wellness Fund • Redox Issued MacBook • Virtual and/or in-person Team & Company Events • Stock Options • Employee Referral Bonus Program