What You’ll Be Doing

• Managing and monitoring enterprise information security, compliance, and IT risk management activities
• Working directly with the business units to facilitate risk assessment and risk management processes
• Recruiting, managing, and mentoring security and compliance staff
• Consulting with lines of business to develop pragmatic solutions that achieve business requirements and maintaining acceptable levels of risk
• Reporting key, risk based, performance metrics that demonstrate effectiveness of our program and a return on investment for our executives and the board of directors
• Actively participate in security architecture with information technology, product management, and Engineering
• Enhancing and maintaining a world-class security infrastructure, controls, and processes
• Evangelizing security best practices across Arcadia, with customers, and the industry
• Collaborating with development teams and product/development leadership to improve security within the in the software development lifecycle
• Responding to customer requests for security audits and security assessment
• Providing vision and guidance for security operations tooling and architecture
• Evangelizing security best practices across Arcadia, with customers, and the industry
• Collaborating with dev teams to apply a shift-left security strategy in the development lifecycle
• Responding to customer requests for security audits and security assessment
• Providing vision and guidance for security operations tooling and architecture
• Driving improvements in incident identification and response capabilities and overseeing incident response table-top and integrated testing
• Ensuring the effectiveness of data backup, recovery, and business continuity capabilities
• Partnering with business stakeholders to raise awareness of security, privacy, and risk management concerns
• Supporting compliance and audit requirements including HITRUST, SOC2, ISO27001, and PCI-DSS
• Assisting with the overall business technology planning, providing a current knowledge and future vision of technology and systems

What You’ll Bring

• Minimum 10 years of experience in healthcare supporting HIPAA security and compliance requirements
• Minimum 10 years of experience in a combination on of risk management, information security and security engineering roles with at least 4 years in a senior leadership role
• Current role as CISO/Head of Security role
• Direct experience leading and managing Information Security Management Systems to support HITRUST, SOC 2 and ISO 27001 compliance
• Deep technical understanding of AWS security architecture and controls
• Provide leadership for incident response, including proven experience with SIEM to identify security events, perform triage, establish escalation if warranted, and manage response
• Fantastic communication skills in both spoken and written forms to explain complex ideas to various audiences, such as, internal stakeholders and external customers and auditors
• Masters or doctorate in information security
• Certification in one or more of the following: CISSP, CISM, SSCP, CCSP, CRISC, others

Would Love for You to Have

• Masters or doctorate in information security
• AWS Certified Security – Specialty Certification
• AWS Solution Architect Certification
• Experience building a red team and demonstrated offensive security capabilities
• Membership with CHIME or AEHIS, Infragard, ISSA, ISACA others
• History of public speaking at security conferences and trade shows
• Published articles and white papers
• Knowledge of healthcare analytics, machine learning, and artificial intelligence

What You’ll Get

• The opportunity to work for an amazing, fast-growing software company leveraging a highly scalable cloud platform
• You seek a fun culture that encourages you to speak up and fosters creative thinking
• You enjoy working with customers and thrive as a team player
• You want to use your skills to make an impact in healthcare
• Awesome work environment
• Competitive compensation
• Great benefits like flextime time off
• Stocked kitchen with snacks and beverages and more