Senior Director, Information Security Operations and Product Management

Healthmap Solutions is the future of specialty health management that focuses on progressive diseases, with a particular expertise in kidney health populations. The Senior Director, Information Security Operations and Product Management, will oversee and lead the lifecycle of products designed to provide security to the organization, ensuring compliance with regulations and building alignment between security and product teams.

Responsibilities:

• Strategic Roadmap Ownership: Define and sustain a multi-year product plan aligned with emerging threat landscapes, market demands, technology innovations, and company growth objectives
• Cross-Functional Leadership: Collaborate with engineering, design, and operations to deliver security products and services. This collaboration is critical across the business teams, infrastructure management, and engineering teams
• Compliance Integration: Ensure enterprise products are designed to meet regulatory demands (e.g., Privacy, Risk, Audit) at scale. Design at scale to ensure that within development lifecycle workstreams, compliance obligations are embedded within the security coding practices
• Innovation & AI: Integrate AI capabilities and advanced automation into defensive security tooling and threat detection
• Financial Management: Manage financial responsibility over the entirety of the security product roadmap inclusive of SaaS, services, and staffing
• Vendor Management: Monitor vendor security performance and identify areas for improvement. Work collaboratively with other functions, including Legal, Privacy, Finance and, IT and the business to ensure proper use of vendors to achieve strategic goals
• Staff Management: Direct and manage staff ensuring coach, development and performance management is in alignment with department goals, ensuring key performance metrics are attained and adjusting efforts to ensure target attainment
• Perform other duties as assigned

Requirements:

• Bachelor's degree in cyber security (or) related degree or equivalent working experience
• 10 years' experience in Information Security which includes 7 years' experience managing and leading staff in at least Information Security domains
• Independently develop and manage the security product and services lifecycle
• Manage relationships cross functionally with Infrastructure Operations and Engineering
• Hands-on security professional
• Experience managing non-IT and outside supplier partner staff to achieve Security product goals and objectives
• Experience reviewing contracts and negotiating terms and conditions with the best interest of the organization
• Manage budgets and financial impacts related to security products and services
• Familiarity with regulatory controls and industry best practice frameworks such as HIPAA, ISO27001/2, PCI, NIST etc.)
• Technical Domain Knowledge: Understanding cybersecurity principles, encryption, data protection regulations, and threat landscapes
• Systems Thinking: Ability to anticipate the effects of security changes on identity, logging, data, and operations
• Excellent team building, leadership, and people management skills
• Strong verbal and written communications skills
• Ability to effectively prioritize and execute tasks in a high-pressure environment
• Ability to communicate at all levels within the organization including senior executives
• Excellent Customer service skills
• Collaboration and Conflict management
• Certified Information Security Systems Professional (CISSP), Certified Information Security Manager (CISM) or Global Information Assurance Certifications (GIAC) certifications are preferred
• Experience using Governance Risk and Compliance (GRC) tools such as Archer preferred