Head Of Digital Security/Ciso

LaneHealth is a fast-growing fintech healthcare startup that deals with PII, HIPAA-protected data, and financial transactions. We developed an industry disruptive benefits instant credit Visa card that can be used for out-of-pocket medical expenses. Our cloud-native architecture is paramount to our success, and we are committed to ensuring the security of our systems. Our goal is to provide our customers with a seamless and secure experience.

Job Overview:

As the Head of Security, you will be responsible for overseeing the security of our cloud-native architecture, PII, HIPAA-protected data, and financial transactions. You will work closely with the CTO, engineering team, and other stakeholders to develop and implement security policies and procedures that align with our SOC 2 compliance requirements. You will lead the development of our security program, ensuring that we maintain a secure environment while providing the best possible customer experience.

Responsibilities:

• Conduct regular risk assessments and vulnerability scans to identify potential threats and develop mitigation strategies.
• Oversee the design and implementation of security measures to protect our cloud-native architecture, PII, HIPAA-protected data, and financial transactions.
• Work closely with the CTO and engineering team to ensure that security is integrated into our software development lifecycle.
• Work closely with external auditors to ensure that we maintain SOC 2 compliance.
• Develop and deliver security training and awareness programs for employees.
• Lead incident response efforts in the event of a security breach.
• Keep up-to-date with the latest security threats and trends and recommend appropriate measures to mitigate risks.
• Develop and maintain security policies and procedures that align with our SOC 2 compliance requirements.

Qualifications:

• Experience working with distributed teams.
• Experience in conducting risk assessments, vulnerability scans, and incident response.
• Relevant certifications such as CISSP, CISM, or CISA are preferred.
• 7+ years of experience in information security, with at least 3 years of experience in a leadership role.
• Experience in securing cloud-native architectures, PII, and financial transactions.
• Strong knowledge of security frameworks and compliance standards such as SOC 2, HIPAA, and PCI DSS.
• Bachelor's degree in computer science, cybersecurity, or related field. Master’s preferred.
• Strong leadership and communication skills, with the ability to work collaboratively with cross-functional teams.

If you are interested in applying for this role, please submit your resume to itjobs@lanehealth.com. Principals only, no agencies, please.

We look forward to hearing from you!