2h ago
Information Security Lead
New York, NY
full-timelead Hybriddigital health / digital therapeutics
Tech Stack
Description
You will lead and mature the company's information security program, ensuring compliance with healthcare regulations and security frameworks, while collaborating with engineering to integrate security into product development. This role offers the opportunity to build a high-performing security team and pioneer innovative solutions in the digital therapeutics space.
Requirements
- Proven ability to integrate AI technologies
- Experience in regulated industry (medical devices, pharma, biotech, healthcare)
- Understanding of NIST CSF, ISO 27001/27002, SOC 2 frameworks
- Knowledge of risk assessment, threat modeling, network/cloud security (AWS), application security
- Experience leading formal security audits and interfacing with engineering teams
Responsibilities
- Maintain and improve ISMS for ISO 27001, SOC 2, IEC 81001-5-1, UK Cyber Essentials Plus certifications
- Lead technical security aspects of GDPR, CCPA, and HIPAA compliance
- Mature SOC capabilities including threat intelligence, monitoring, detection, and analysis
- Collaborate with Engineering to ensure Secure Development Lifecycle (SDLC) practices
- Support regulatory submissions with cybersecurity QMS documentation for FDA, EU MDR, NIST 800-53
0 views 0 saves 0 applications