Director - Information Security - Health App

Client: Health App (No. 1 Health App)

Role :

- Lead a strategic and comprehensive information security and risk management team and program to ensure that the integrity, confidentiality, and availability of information is owned and controlled by the security department.

- Maintain, and publish up-to-date security policies, standards, and guidelines while evangelizing the approval, training, and dissemination of security policies and practices across the entire company, especially at the Leadership level.

- Attend Health Systems client visits and be the external security voice for the company. Connect with our potential customers to explain how their customers and data are protected.

- Continually ensure that security programs are in compliance with relevant laws, regulations, and policies to minimize or eliminate risk and audit findings. Implement Information security agreements with company's client and vendor partners.

- Oversee effective disaster recovery policies and standards to align with business continuity management goals. Coordinate plans and procedures to ensure that business-critical services are recovered in the event of a security event. Provide direction, support and in-house consulting in these areas.

Candidate Attributes :

- Minimum of 12 years of proven experience in a combination of risk management, information security, and IT roles demonstrating increasing levels of responsibility

- Professional security management certifications, such as CISSP, CISM, CISA; Healthcare Security and Compliance knowledge and/or certifications preferred: Certified HIPAA Professional (CHP), HITRUST, SOC, CHISP

- High degree of initiative, integrity, analytical/problem solving skills with a proven track record in developing information security policies and procedures, and successfully executing programs that meet the objectives of excellence in a dynamic environment

- Superior communication, interpersonal and collaborative skills. The ability to communicate security and risk-related concepts to technical and nontechnical audiences at all levels is a must.

- Master's Degree preferred