information security director

Brown University

<div>Job Description:
Director, Information Security
Office of Information Technology
Brown University
The Director of Information Security in the Office of Information Technology (OIT) is a senior leadership role within Brown University&rsquo;s Information Security Group (ISG). Reporting to the Chief Information Security Officer (CISO), the Director provides strategic and operational oversight for three critical pillars of the University&rsquo;s cybersecurity program: Security Engineering, Security Operations, and Information Compliance &amp; Risk.
The Director provides critical operational continuity in the CISO&rsquo;s absence. This role is responsible for translating institutional vision into actionable plans, ensuring that Brown&rsquo;s digital assets are protected through robust engineering, that security incidents are managed with precision, and that the University maintains a rigorous posture regarding IT risk and regulatory compliance.
Acting as a key liaison between technical practitioners, University leadership, and administrative departments (including the Office of General Counsel and Brown Risk, Audit, and Compliance teams), the Director fosters a culture of continuous improvement and proactive risk management.
This role has technical subject matter expertise and management duties. They may be alerted for unplanned escalation or backup support at any time. They are expected to respond to alerts as appropriate.
Occasional travel to the Providence, RI campus is required for on-site leadership meetings or incident management.
Qualifications:
Education and Experience<ul><li>
Bachelor's Degree required.</li><li>
10+ years of combined IT and IT security experience, with at least 3 years in a significant leadership role.</li><li>
Proven management experience providing strategic oversight and mentorship to multidisciplinary technical teams, ensuring alignment between departmental goals and high-performance execution.</li><li>
Experience with security operations, incident response, and security engineering.</li><li>
Knowledge of privacy regulations (e.g., GDPR, CCPA, FERPA, HIPAA) preferred.</li><li>
Industry certifications such as CISSP, CISM, CISA, or equivalent preferred.</li><li>
Experience with vulnerability management, and security architecture.</li><li>
Experience with cloud security (e.g. Azure, GCP, and AWS) preferred.</li></ul>
Job Competencies<ul><li>
Strong leadership and team-building skills.</li><li>
Ability to manage multiple priorities in a dynamic environment.</li><li>
Excellent verbal and written communication skills.</li><li>
Strong analytical and problem-solving abilities.</li><li>
Knowledge of compliance frameworks and regulatory requirements (e.g. NIST 800-171 and PCI DSS).</li><li>
Ability to work effectively with diverse stakeholders across the institution</li></ul>
A criminal background check and education verification is required. In addition to completing a Criminal Justice Information Services (CJIS).
Benefits of Working at Brown:
Information on the Benefits of Working at Brown can be found here.
Recruiting Start Date:
2026-04-07
Job Posting Title:
Director, Information Security
Department:
Office of Information Technology
Grade:
Grade 13
Worker Type:
Employee
Worker Sub-Type:
Regular
Time Type:
Full time
Scheduled Weekly Hours:
37.5
Position Work Location:
Remote 
Submission Guidelines:
Please note that in order to be considered an applicant for any staff position at Brown University you must submit an application form for each position for which you believe you are qualified. Applications are not kept on file for future positions. Please include a cover letter and resume with each position application.
This position is not eligible for visa sponsorship.
Still Have Questions?
If you have any questions you may contact employment@brown.edu.
Brown is an E-Verify Employer.
EEO Statement:
Brown University provides equal opportunity and prohibits discrimination, harassment and retaliation based upon a person&rsquo;s race, color, religion, sex, age, national or ethnic origin, disability, veteran status, sexual orientation, gender identity, gender expression, or any other characteristic protected under applicable law, in the administration of its policies, programs, and activities. The University recognizes and rewards individuals on the basis of qualifications and performance. The University maintains certain affirmative action programs in compliance with applicable law.</div>

Director, Information Security

Blackwolve Security

Security Systems DirectorCompany: Blackwolve SecurityAddress: Muharraq Commercial District, Building 789, Road 123, Block 456, MuharraqSalary: BHD 3,100 per monthAbout Blackwolve Security:Blackwolve Security is a premier provider of advanced security solutions, operating from the Muharraq Commercial District. We specialize in mention specific services, corporate security, cybersecurity, physical security systems, risk assessment. Our commitment is to deliver robust, reliable, and cutting-edge security services to protect our clients' assets and interests.Job Summary:We are seeking a highly experienced and strategic Security Systems Director to lead our security operations and technology initiatives. The ideal candidate will have a strong background in security management, risk assessment, security systems design and implementation, and team leadership. You will be responsible for developing and executing comprehensive security strategies, overseeing the deployment and management of security systems, and ensuring the highest level of protection for our clients.Key Responsibilities:<ul><li>Develop and implement overarching security strategies and policies to protect clients' assets and information.</li><li>Oversee the design, installation, and maintenance of physical and electronic security systems , CCTV, access control, alarm systems, cybersecurity infrastructure.</li><li>Conduct thorough risk assessments and vulnerability analyses to identify potential security threats and develop mitigation plans.</li><li>Manage and lead a team of security professionals, providing guidance, training, and performance management.</li><li>Ensure compliance with all relevant security standards, regulations, and best practices.</li><li>Stay current with the latest security technologies, threats, and mitigation techniques.</li><li>Respond to and manage security incidents effectively, including investigation and post-incident analysis.</li><li>Develop and manage the security systems budget and resources efficiently.</li><li>Liaise with clients and stakeholders to understand their security needs and provide tailored solutions.</li></ul>Qualifications:<ul><li>Extensive experience in security management, security systems engineering, or a related field, with a proven track record in a leadership role.</li><li>In-depth knowledge of physical security systems, cybersecurity principles, risk management, and incident response.</li><li>Demonstrated ability to design, implement, and manage complex security systems.</li><li>Excellent leadership, communication, problem-solving, and decision-making skills.</li><li>Experience with security technologies, including surveillance, access control, network security, and data protection.</li><li>Relevant security certifications, CPP, CISSP, CISM are highly desirable.</li><li>Bachelor's degree in Security Management, Criminal Justice, Information Technology, or a related field.</li></ul>What We Offer:<ul><li>A competitive monthly salary of BHD 3,100.</li><li>The opportunity to lead and innovate within the security sector, protecting clients across Bahrain.</li><li>A challenging and rewarding role in a professional environment in Muharraq.</li></ul>To Apply:Interested candidates should submit their resume and a cover letter detailing their security leadership experience, technical expertise, and strategic approach to security management.نوع الوظيفة: دائمالراتب المدفوع: BD٠٫٠٠٠&nbsp;لكل شهرالقدرة على التنقل/الانتقال:<ul><li>Al-Muḥarraq: التنقل بشكل موثوق أو التخطيط للانتقال قبل البدء في العمل (مفضل)</li></ul>موقع العمل: بشكل شخصي

Security Systems Director

The Office of the Chief Financial Officer (OCFO)

<div>
 
 
 Government of the District of Columbia
 
 
 
 
 Office of the Chief Financial Officer (OCFO)
 
 
 
 
 
 
 
 
 Director Information Technology Security
 
 
 
 (CISO /Cyber Security Leader &amp; Operations)
 
 
 
 $176,948.00 - $214,712.00 Annually
 
 
 
 
 Washington DC
 
 
 
 
 
 
 The Office of the Chief Financial Officer (OCFO) is the steward of the Government of the District of Columbia&rsquo;s (District&rsquo;s) finances. Since its creation in 1996, OCFO&rsquo;s mission is to ensure the financial integrity and long-term fiscal health of the District. OCFO accomplishes this mission by ensuring balanced budgets, unqualified or &ldquo;clean&rdquo; audit opinions, and access to quality credit markets with high and improving bond ratings.
 
 
 
 
 
 OCFO&rsquo;s operational responsibilities include forecasting the District&rsquo;s revenues and financial condition, developing and managing the District&rsquo;s budget, administering the District&rsquo;s taxes, and executing and recording the District&rsquo;s financial transactions. In addition, OCFO administers the District&rsquo;s lottery and gaming programs, and oversees the finances of the University of the District of Columbia and the Washington Convention and Sports Authority (Events DC).
 
 
 
 
 
 We are searching for a
 
 Director of Information Technology Security.
 
 This position is in the Office of the Chief Financial Officer (OCFO), Office of the Chief Information Officer (OCIO). The incumbent is responsible for establishing and managing the OCFO&rsquo;s security strategy and programs to ensure the protection of both physical and informational assets.
 
 
 
 
 
 
 Duties include, but are not limited to:
 
 
 <ul>
 <li>
 Develop and lead the enterprise-wide security strategy
 </li>
 <li>
 Direct the development, implementation, and enforcement of security policies, standards, and procedures, overseeing cybersecurity operations, including threat detection, incident response, vulnerability management, and data protection.
 </li>
 <li>
 Oversee cloud and vendor-hosted platforms security initiatives; executing disaster recovery and business continuity planning and testing; defining security requirements in contracts.
 </li>
 <li>
 Provide strategic guidance on security requirements for new systems; developing and delivering security awareness and training programs; and supervising and mentoring security staff.
 </li>
 <li>
 Performs other related duties as assigned
 </li>
 </ul>
 
 
 
 
 
 Minimum Qualifications
 
 
 
 Eight (8) years of progressive experience managing and directing enterprise information security programs in a government or complex organization; leading, developing, and implementing security policies, standards, and enterprise security strategies; developing and managing cybersecurity programs; overseeing vendor security requirements and contract compliance; and providing technical advisory support for risk management and disaster recovery. Experience must also include leading security awareness or training programs, conducting and overseeing security audits, coordinating with senior leadership and external stakeholders, and at least two (2) years of supervisory experience over technical and managerial staff.
 
 
 
 
 
 For initial review, please submit your resume to
 
 anita.tolani@dc.gov
 
 or to the Office of the Chief Financial Officer, Human Resources Division, located at 1101 4th Street, SW, Suite W220, Washington, DC 20024.
 
 
 
 
 
 To complete an application or for additional details related to this vacancy, please visit www.cfo.dc.gov and reference announcement number: 26-IT-OCIO-0006.
 
 
 
 
 
 The OCFO offers a competitive salary and benefits package including medical, dental, retirement, and educational assistance.
 
 
 
 
 
 
 The Office of the Chief Financial Officer is an EQUAL OPPORTUNITY EMPLOYER
 
 
</div>

Director Information Technology Security (CISO)

CardWorks Servicing

Join our team - and take the next step in achieving a fulfilling career! What We Do At CardWorks, we aim to help people connect with possibility and opportunity using our financial servicing expertise. Building meaningful, long-term relationships with consumers, our employees, and our clients is what matters most. Who We Are CardWorks, Inc. is a diversified consumer finance service provider and parent company of CardWorks Servicing, LLC, Merrick Bank and Carson Smithfield, LLC. CardWorks Servicing, LLC provides end-to end operational servicing functions for credit cards, secured cards, and installment loans. We service consumer and small business loans across the credit spectrum and offers backup servicing and due diligence services to capital providers and trustees. Merrick Bank is an FDIC-insured Utah Industrial Loan Bank. Merrick operates three main business lines: credit cards, recreational lending, and merchant services. Carson Smithfield, LLC provides a variety of post-charge-off debt recovery services, including digital self-service, IVR, live agent, and external agency management. Position Summary: The Information Security Risk Management Director is responsible for leading the design, implementation, and oversight of the organization&rsquo;s information security risk management and vendor security assessment programs. This is a hands-on leadership role that develops and ensures that cyber risk identification, assessment, mitigation, and reporting activities are consistently executed and centrally managed within the organization&rsquo;s risk management framework and tools. The Director oversees and performs information security risk assessments across internal systems, business processes, third-party vendors, and enterprise projects to ensure risks are effectively identified, rated, and managed in alignment with Enterprise Risk Management practices and regulatory frameworks such as the Cyber Risk Institute (CRI) Profile, NIST Cybersecurity Framework (CSF), and PCI DSS. By integrating security risk management practices with business and technology initiatives, the Director drives informed decision-making, strengthens the organization&rsquo;s security posture, enhances compliance with policies and standards, and promotes a culture of proactive security risk management across the enterprise. Essential Functions: Leadership and Program Oversight Lead, mature, and operationalize the organization&rsquo;s information security risk management and vendor security assessment programs. Provide strategic and hands-on leadership for a small team and/or third-party resources responsible for executing assessments, managing risk registers, and maintaining program processes. Develop and maintain consistent methodologies, templates, and workflows for risk assessments and vendor reviews. Partner with Enterprise Risk Management to ensure cybersecurity risks are integrated into enterprise risk registers, prioritized appropriately, and aligned with enterprise issue management and escalation processes. Risk Assessment and Governance Oversee and perform security risk assessments for applications, infrastructure, and business processes to identify threats, vulnerabilities, control weaknesses, and business impacts. Mature risk scoring methodologies to prioritize risks based on likelihood and business impact. Identify opportunities to streamline assessment workflows, automate evidence collection, and enhance tool integration across GRC, IT, and security systems. Vendor and Third-Party Security Risk Lead vendor security reviews, evaluating SOC 2 reports, ISO 27001 certifications, PCI AOCs, and penetration test results to assess vendor control maturity. Collaborate with Procurement, Legal, and Third-Party Risk Management (TPRM) teams to embed security requirements into contracts, onboarding, and ongoing vendor oversight. Track and manage vendor-related security issues, ensuring timely remediation, escalation, and closure consistent with SLAs and enterprise issue management processes. Develop and maintain vendor risk dashboards and KRIs to provide visibility into supply-chain risk exposure and remediation progress. Reporting and Continuous Improvement Define, track, and report cybersecurity risk metrics, dashboards, and assessment outcomes for senior leadership. Ensure data quality, consistency, evidence integrity, and traceability across GRC platforms and supporting tools Drive program improvements through automation, analytics, risk trend analysis, and lessons learned from incidents, audits, and assessments. Promote a culture of transparency, accountability, and proactive cyber risk management throughout the organization. Education and Experience 8+ years of experience in information security, security risk management, compliance, or related fields within a regulated or technology-driven environment, including 3+ years in a leadership or program management capacity. Demonstrated experience in assessing, mitigating, and tracking security risks across systems, infrastructure, and third-party vendors, with proven success in driving remediation and program maturity. Strong understanding of information security risk frameworks and methodologies, including the Cyber Risk Institute (CRI) Profile, NIST Cybersecurity Framework (CSF), CIS-CSC, and PCI DSS, with hands-on experience applying these standards to projects, systems, and infrastructure. Experience developing or enhancing risk management processes, including risk and control matrix development, risk scoring models, control evaluation criteria, and integrating governance workflows with enterprise risk management (ERM) practices. Proven ability to collaborate across diverse stakeholders, including IT, Enterprise Risk Management, Legal, Compliance, business units, and external partners, to embed security requirements, align with project objectives, and inform decision-making. Familiarity with GRC or security compliance platforms (e.g. Archer, ServiceNow, Auditboard) and reporting mechanisms for documenting and tracking risk, remediation, and control testing results. Bachelor&rsquo;s or master&rsquo;s degree in information security, Information Technology, Risk Management, or a related field preferred. Preferred certifications: CRISC, CISM, CISSP, or CISA. Summary of Qualifications: Strategic and hands-on cybersecurity risk leader with a proven ability to design, implement, and mature enterprise-wide risk management programs. Deep understanding of information security risk frameworks (NIST CSF, CRI Profile, PCI DSS, CIS Controls, etc.) and enterprise risk management principles, with practical experience applying them across systems, processes, and third-party vendors. Demonstrated success in leading and mentoring small teams, fostering capability growth, and scaling risk management functions to meet enterprise needs. Strong analytical and problem-solving skills, adept at evaluating threats, assessing process and control effectiveness, addressing gaps, and translating risks into business-relevant insights. Skilled at delivering on and coordinating multiple efforts across IT, business, compliance, and ERM teams, influencing decisions, and driving risk-informed outcomes while maintaining accountability and transparency. Excellent communication and interpersonal skills (via email, chat, in-person, and virtual) to engage effectively with technical teams, executives, and non-technical stakeholders. High level of attention to detail and organization, ensuring accurate, timely, and complete documentation and reporting. Recognized as a trusted advisor and credible authority, capable of balancing strategic oversight with hands-on execution in a dynamic and evolving environment. Self-motivated and collaborative, with a strong commitment to continuous improvement, accountability, operational excellence, and promoting a culture of proactive security risk management across the organization. Ideally, the qualified candidate will work at the following location(s): South Jordan, UT; Woodbury, NY; Horsham, PA; Pittsburgh, PA; Orlando, FL. A hybrid work model or fully remote model can be considered based on hiring manager decision and priorities of the role. The salary range for this position, if located in NY Metro/NY State is $151,165 to $167,961. However, please note that the salary range will vary for other geographic areas. #INDHP Our Employee Value Proposition Competitive Pay, including a Bonus Target or Variable Pay Incentive Program Benefits Package -Medical, Dental, and Vision (plus much more) 401(k) Plan with Company Match Short- &amp; Long-Term Disability Wellness Programs Group Life and AD&amp;D Insurance Paid Vacation, Sick Days and bank Holidays Employee Engagement Activities including Employee Appreciation Day, DEI Employee Resource Groups, Corporate Social Responsibility, Service Recognition We offer a total rewards package comprised of a competitive base rate of pay, variable pay incentive programs based on the role, and a comprehensive benefit suite. Offered rates of pay are determined based on job-related knowledge, relevant experience, skills, certifications, and geographic location. We are an equal opportunity employer, and we evaluate qualified applicants without regard to race, color, religion, sex, national origin, disability, veteran status or any other legally protected characteristic. We will conduct a thorough background check for all hires in compliance with applicable laws.

Director, Cybersecurity Compliance

Seleg Security

Security Systems Director &ndash; Seleg Security<ul><li>Primary Location: Al Hamra District, Corniche Road, Jeddah, KSA</li><li>Monthly Salary: SAR 38,000</li><li>Role Type: Senior Executive / Engineering Leadership</li></ul>The Mission at Al Hamra: Seleg Security is appointing a Security Systems Director to lead our technical defense and surveillance infrastructure from our Jeddah headquarters. Situated along the prestigious Corniche Road, this role is responsible for the design, implementation, and maintenance of enterprise-level security technologies for high-profile assets across the Western Province. We are seeking a leader who can integrate physical security hardware with advanced software analytics to ensure a 360-degree protective environment for our clients and operations.Technical &amp; Leadership Credentials:<ul><li>Experience: A minimum of 14 years in security engineering or systems integration, with at least 6 years in a directorial or department-head role.</li><li>Education: Bachelor&rsquo;s or Master&rsquo;s degree in Electrical Engineering, Electronics, or Systems Engineering.</li><li>System Mastery: Deep expertise in IP-CCTV architectures, Biometric Access Control, Perimeter Intrusion Detection Systems (PIDS), and Command &amp; Control Center (SOC) management.</li><li>Compliance: Thorough knowledge of HCIS (High Commission for Industrial Security) standards and local MOI regulations in Saudi Arabia.</li><li>Leadership: Proven ability to manage large-scale technical deployments and lead multi-disciplinary teams of engineers and technicians.</li></ul>Strategic Responsibilities:<ul><li>Defining the long-term roadmap for security technology adoption and digital transformation.</li><li>Managing vendor relationships and contract negotiations for multi-million SAR security projects.</li><li>Conducting high-level risk assessments and vulnerability audits for critical infrastructure.</li><li>Ensuring 24/7 operational readiness of all security systems through proactive lifecycle management.</li></ul>Candidate Status: Preference will be given to candidates with an active HCIS certification and a transferable Iqama currently based in Jeddah.نوع الوظيفة: دوام كاملالراتب المدفوع: ﷼٣٨٬٠٠٠٫٠٠&nbsp;لكل شهرموقع العمل: بشكل شخصي

Sharecare

<div>Job Description:
Sharecare is a digital healthcare company that delivers software and tech-enabled services to stakeholders across the healthcare ecosystem to help improve care quality, drive better outcomes, and lower costs. Through its data-driven AI insights, evidence-based resources, and comprehensive platform &ndash; including benefits navigation, care management, home care resources, health information management, and more &ndash; Sharecare helps people easily and efficiently manage their healthcare and improve their well-being. Across its three business channels, Sharecare enables health plan sponsors, health systems and physician practices, and leading pharmaceutical brands to drive personalized and value-based care at scale. To learn more, visit Sharecare.com.
Job Summary:
The Director of IT Security Compliance is responsible for leading and managing enterprise-wide security compliance, IT audit, and third-party risk management initiatives. This role ensures alignment with industry standards and regulatory requirements while overseeing certification efforts, audit processes, vendor risk evaluations, and continuous improvement of compliance programs. The Director will work cross-functionally to support business objectives while maintaining a strong security, audit, and compliance posture.
Essential Job Functions:
Certification &amp; Audit Management<ul><li>
Lead and manage all external certification audit processes, including ISO 27001, HITRUST, and SOC 1 / SOC 2.</li><li>
Serve as the primary point of contact for external auditors, certification bodies, and IT audit firms.</li><li>
Oversee IT audit readiness activities, including control design, documentation, and evidence management.</li><li>
Coordinate internal stakeholders to ensure timely and successful audit execution.</li><li>
Respond to client-driven audits and due diligence requests across all business lines.</li></ul>
IT Audit Oversight &amp; Governance<ul><li>
Lead internal and external IT audit engagements, including planning, scoping, execution support, and reporting.</li><li>
Ensure alignment of IT controls with audit frameworks (e.g., SOC, ISO, HITRUST, NIST).</li><li>
Partner with Internal Audit and external auditors to facilitate efficient audit cycles.</li><li>
Review audit results, assess control effectiveness, and provide strategic recommendations.</li><li>
Establish and maintain audit documentation standards, including policies, procedures, and control narratives.</li></ul>
Third-Party Risk Management (TPRM)<ul><li>
Define and lead the enterprise third-party risk management program.</li><li>
Establish processes to assess and tier vendor risk based on data sensitivity, access, and business impact.</li><li>
Evaluate vendor risk through:<ul><li>
Business owner&ndash;completed risk assessments</li><li>
Vendor-provided certifications (e.g., SOC 2, HITRUST)</li><li>
Independent vendor security scorecards</li></ul></li><li>
Leverage GRC tools to calculate and track inherent risk and residual risk for all vendors.</li><li>
Review vendor control environments and identify gaps against organizational and regulatory requirements.</li><li>
Partner with business owners to ensure appropriate risk acceptance, mitigation, or remediation strategies are implemented.</li><li>
Monitor vendor risk posture continuously and reassess critical vendors on a defined cadence.</li><li>
Support procurement and legal teams in embedding security and compliance requirements into vendor contracts.</li></ul>
Corrective Action &amp; Findings Management<ul><li>
Define, implement, and manage the internal corrective action plan (CAP) process.</li><li>
Track and drive remediation of findings from:<ul><li>
IT audits (internal and external)</li><li>
Client audits</li><li>
Penetration tests</li><li>
Risk assessments</li><li>
Vendor risk assessments</li></ul></li><li>
Ensure timely closure of identified gaps and maintain appropriate audit-ready documentation.</li></ul>
Risk Assessment &amp; Compliance Processes<ul><li>
Develop, implement, and oversee internal risk assessment processes aligned with certification and audit requirements.</li><li>
Evaluate IT general controls (ITGCs), application controls, and security controls.</li><li>
Identify control gaps and provide remediation strategies aligned with audit expectations.</li></ul>
Continuous Improvement<ul><li>
Define and execute strategies for continuous improvement of compliance, audit, and third-party risk processes.</li><li>
Enhance control frameworks, documentation quality, and audit efficiency.</li><li>
Monitor evolving regulatory, audit, and industry requirements.</li></ul>
Client &amp; RFP Support<ul><li>
Respond to external audit requests, security questionnaires, and RFPs across all business units.</li><li>
Translate audit and compliance posture into clear, client-facing responses.</li><li>
Partner with sales, legal, and operational teams to support business growth.</li></ul>
Access Management Oversight<ul><li>
Execute and oversee the quarterly user access review process.</li><li>
Ensure compliance with ITGC access control requirements.</li><li>
Validate adherence to least privilege and segregation of duties (SoD).</li></ul>
KPI Development &amp; Performance Management<ul><li>
Define, implement, and monitor KPIs for compliance, audit, and third-party risk processes.</li><li>
Develop dashboards to track audit readiness, vendor risk posture, control effectiveness, and remediation progress.</li><li>
Provide regular reporting to executive leadership and stakeholders.</li></ul>
Qualifications:<ul><li>
Bachelor&rsquo;s degree in Information Security, Information Technology, Accounting, or related field (or equivalent experience).</li><li>
10+ years of experience in IT security, compliance, IT audit, and/or third-party risk management.</li><li>
Strong hands-on experience with:<ul><li>
SOC 1 / SOC 2</li><li>
ISO 27001</li><li>
HITRUST</li><li>
IT General Controls (ITGCs)</li><li>
Third-party/vendor risk management frameworks</li></ul></li><li>
Proven experience managing IT audits and vendor risk assessments.</li><li>
Proven experience managing security compliance teams.</li><li>
Experience with GRC platforms and risk scoring methodologies (inherent vs. residual risk).</li><li>
Strong understanding of control environments and risk mitigation strategies.</li></ul><ul><li>
Excellent communication and stakeholder management abilities</li><li>
Ability to manage multiple priorities, audits, and vendor relationships simultaneously</li><li>
Detail-oriented with strong documentation and evidence management discipline</li></ul>
Preferred:
<ul><li>Professional certifications such as:<ul><li>
CISA (Certified Information Systems Auditor)</li><li>
CISSP, CISM, or CRISC</li></ul></li><li>
Experience working with internal audit teams or public accounting firms.</li><li>
Experience in healthcare or other regulated industries.</li><li>
Familiarity with vendor risk tools and security rating platforms (e.g., BitSight, SecurityScorecard).</li><li>
Familiarity with IT development and operations management tools (e.g. JIRA, WIZ, MEND, OneTrust, CrowdStrike)</li></ul>
Sharecare and its subsidiaries are Equal Opportunity Employers and E-Verify users. Qualified applicants will receive consideration for employment without regard to race, color, sex, national origin, sexual orientation, gender identity, religion, age, equal pay, disability, genetic information, protected veteran status, or other status protected under applicable law.</div>

Director, IT Security & Compliance - Remote

ConvenientMD

<div><div>At ConvenientMD, we're on a mission to make good health more convenient for all &ndash; working to improve how patients and providers experience healthcare in New England. To support this belief, we're building a team of dedicated professionals who genuinely care about improving lives, are passionate about work that can make a difference, and are driven to learn from one another.</div><h3 class="jobSectionHeader">
The Opportunity</h3>

The Director of Technology Security &amp; Governance will play a critical leadership role in safeguarding the organization's technology environment while establishing a disciplined, enterprise-wide approach to technology governance. This leader will be responsible for advancing information security and privacy programs that protect patient and organizational data, while also designing and operating a structured intake, prioritization, and oversight process for technology initiatives.

Operating within a highly regulated healthcare environment, this role ensures the confidentiality, integrity, and availability of systems and data, while enabling thoughtful, transparent decision-making around technology investments. The Director will partner closely with IT, Compliance, Clinical, Revenue Cycle, Finance, Operations, and Executive leadership to embed security, privacy, and governance into both strategic planning and day-to-day operations.

This is an opportunity to balance strategic leadership with hands-on execution, building scalable frameworks that support growth, mitigate risk, and drive operational excellence across the enterprise.

This role is not remote. This position is based onsite at ConvenientMD headquarters in Portsmouth, NH.
<h3 class="jobSectionHeader">
Your Impact
</h3><ul><li>Information Security Leadership
<ul><li>Lead and manage the organization's technology security function, ensuring robust protection of systems, infrastructure, and sensitive data</li>
<li>Develop, implement, and continuously evolve comprehensive cybersecurity strategies, policies, and procedures</li>
<li>Oversee security risk management, including risk assessments, vulnerability management, remediation planning, and risk acceptance processes</li>
<li>Monitor emerging threats and lead incident response efforts, ensuring rapid, coordinated mitigation and recovery</li>
<li>Ensure appropriate safeguards are in place across clinical, financial, and operational systems, including EHRs, cloud platforms, and third-party technologies</li>
<li>Provide clear, executive-level reporting on security posture, risks, and mitigation strategies</li>
</ul></li><li>Privacy &amp; Regulatory Compliance
<ul><li>Partner with Compliance and Legal to support adherence to HIPAA, HITECH, and other applicable privacy regulations</li>
<li>Contribute to the development and delivery of privacy policies, training programs, and organizational awareness initiatives</li>
<li>Support audits, regulatory inquiries, and security and privacy assessments</li>
<li>Champion a culture of security awareness and best practices across the organization</li>
</ul></li><li>Technology Governance &amp; Prioritization
<ul><li>Design, implement, and manage an enterprise-wide technology governance framework, including project intake, evaluation, and prioritization</li>
<li>Establish clear criteria for assessing technology initiatives, including security, privacy, risk, regulatory impact, resource capacity, and strategic alignment</li>
<li>Partner with executive leadership to drive transparent portfolio management and prioritization decisions</li>
<li>Ensure security and privacy considerations are embedded early in project planning and solution design</li>
</ul></li><li>Operational Excellence &amp; Continuous Improvement
<ul><li>Collaborate cross-functionally to deliver secure, scalable, and effective technology solutions</li>
<li>Analyze support volume and trends to identify opportunities for efficiency and reduction through technology</li>
<li>Establish and track KPIs, driving accountability, continuous improvement, and program maturity</li>
</ul></li><li>Strategic Partnership &amp; Communication
<ul><li>Act as a trusted advisor to executives, clinicians, and business leaders on security, privacy, and governance matters</li>
<li>Translate complex technical and regulatory concepts into clear, actionable, business-focused insights</li>
</ul></li></ul><h3 class="jobSectionHeader">Who You Are</h3>
<ul><li>Experience: Minimum of 4 years of experience in healthcare technology and 4 years in IT security and governance</li>
<li>Healthcare technology leader: Proven track record of building and managing high-performing security and governance programs within a healthcare environment</li>
<li>Cybersecurity expert: Deep understanding of cybersecurity frameworks, threat management, incident response, and regulatory requirements in healthcare</li>
<li>Strategic and hands-on operator: Ability to balance long-term strategy with day-to-day execution in a complex, regulated environment</li>
<li>Clear and influential communicator: Skilled at translating complex technical concepts into business-focused insights for diverse stakeholders</li>
<li>Process and governance builder: Experienced in developing policies, documentation, and structured frameworks that drive consistency, accountability, and scalability</li>
<li>Collaborative partner: Trusted relationship-builder who works effectively across IT, Compliance, Clinical, and executive teams</li>
</ul><div><h4 class="jobSectionHeader">Why You'll Love Working With Us</h4>
<ul><li>Collaborative team environment that encourages professional growth</li>
<li>Urgent care services at no cost to our team members and their families</li>
<li>Extensive benefit offerings including health, dental, and vision coverage, company paid short-term disability, and optional pet insurance</li>
<li>401k match after one year of service</li>
<li>Access to our primary care (depending on location)</li>
<li>Educational Alliance with Purdue University Global and reduced tuition rates for team members and their families</li>
<li>Employer rewards and access to discounts offered on services and products such as hotels, travel, entertainment, restaurants, and more</li>
</ul>
There's a job and then there's purposeful, transformative work. Our aim is to create a workplace where you can learn, grow, and continuously refine your skills. Applicants rarely meet every single job requirement, and we appreciate that many skills and backgrounds can make people successful in this role. We are committed to creating a strong sense of belonging for all team members, and our process is designed to prevent discrimination against applicants regardless of gender identity, sexual orientation, religion, ethnicity, age, disability status, or any other aspect which makes you unique. If you're looking for a great next step, and want to feel good about what you do, we'd love to hear from you.

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.</div></div>

Director of Technology Security & Governance

Search 10000+ Information security director jobs near you this April. New roles added regularly across leading industries. Apply today.

10000 information security director jobs Near Me

Director, Information Security

Security Systems Director

Director Information Technology Security (CISO)

Director, Cybersecurity Compliance

Security Systems Director

Director, IT Security & Compliance - Remote

Director of Technology Security & Governance