Director of Cybersecurity

Director of Cybersecurity

We are seeking an experienced and hands-on Director of Cybersecurity to lead our cybersecurity initiatives at a dynamic and fast-growing Healthcare SaaS company of 700-800 employees. Reporting directly to the CTO, this role requires a strategic thinker with the technical prowess to implement and maintain robust cybersecurity defenses in a fast-paced startup environment. The ideal candidate will have an extensive background as a cybersecurity professional within SaaS or software product companies and a proven track record of managing and evolving cybersecurity programs to protect company assets, data, and customer information.

Key Responsibilities:

• Develop, implement, and monitor a comprehensive cybersecurity program that aligns with business objectives and mitigates security risks.
• Lead all aspects of cybersecurity operations, including threat detection, incident response, vulnerability management, and security compliance.
• Collaborate with cross-functional teams to establish cybersecurity best practices and ensure security is built into the development lifecycle.
• Conduct regular risk assessments, security audits, and penetration testing to identify and address vulnerabilities.
• Lead incident response efforts, including forensic investigations, root cause analysis, and corrective action planning.
• Stay current with emerging cybersecurity threats, industry trends, and regulatory requirements to continually enhance the company's security posture.
• Develop and enforce security policies, standards, and protocols to ensure compliance with applicable regulations (e.g., HIPAA, SOC 2).
• Mentor and guide a team of cybersecurity professionals, fostering a collaborative, high-performance culture.

Qualifications:

• Experience: 8-10 years in cybersecurity, with a background in Healthcare.
• Industry Experience: Experience in a Healthcare SaaS or software product that operates in a fast-paced, startup-style environment is highly preferred.
• Technical Skills:
• Hands-on expertise in threat detection, incident response, vulnerability management and assessment, and security architecture.
• Strong IAM experience with SSO and MFA
• Solid experience with NIST Cybersecurity Framework, HITRUST, and ISO 27001
• Strong understanding of network security, cloud security, and secure software development practices.
• In-depth understanding of HIPAA
• Education: Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field; relevant certifications (e.g., CISSP, CISM, CEH) are a plus.
• Soft Skills: Strong leadership and communication skills; ability to collaborate effectively with technical and non-technical stakeholders; a proactive, problem-solving mindset.