Vice President, Ciso Jobs

Hi, we're Oscar. We're hiring a Vice President, Chief Information Security Officer to lead our Security team.
Oscar is the first health insurance company built around a full stack technology platform and a focus on serving our members. We started Oscar in 2012 to create the kind of health insurance company we would want for ourselves—one that behaves like a doctor in the family.
About The Role
Oscar is committed to ensuring that we can honor our member and stakeholder trust through a thoughtful and diligent security program. We are currently seeking a proven leader to spearhead this commitment.
The CISO will have the opportunity to shape the strategy and drive the execution of Oscar’s security program, with full support and sponsorship from the executive team and Board of Directors. This leader will ensure that we can effectively protect Oscar and our members’ data by integrating enterprise level security strategies, vision, and architecture. Collaborating across Oscar to drive major security initiatives, this leader will also shepherd the company along as we continue to mature the security program.
Oscar is a blended work culture where everyone, regardless of work type or location, feels connected to their teammates, our culture and our mission.
If you live within commutable distance to our New York City office ( in Hudson Square), our Tempe office (off the 101 at University Ave), or our Los Angeles office (in Marina Del Rey), you will be expected to come into the office at least two days each week. Otherwise, this is a remote / work-from-home role.
You must reside in one of the following states: Alabama, Arizona, California, Colorado, Connecticut, Florida, Georgia, Illinois, Iowa, Kentucky, Maryland, Massachusetts, Michigan, New Hampshire, New Jersey, New Mexico, New York, North Carolina, Ohio, Oregon, Pennsylvania, Rhode Island, Tennessee, Texas, Utah, Virginia, Washington, or Washington, D.C. Note, this list of states is subject to change.
The base pay for this role is: $300,000 - $350,000. You are also eligible for employee benefits, participation in Oscar's unlimited vacation program, company equity grants, and annual performance bonuses.
Responsibilities

• Report on management of security risk to Oscar’s Audit Committee
• Partner with third parties as appropriate on required security assessments and audits
• Provide leadership, direction and guidance of a high-performing team of security professionals, including resource management, hiring, development, mentorship and performance management of the team
• Create and drive KPIs for the Cybersecurity program
• Conduct internal security and privacy assessments and working closely with Legal, Compliance, IT, HR, Sales, Marketing, Procurement, and any third party data vendors/providers to ensure that all other requirements pertaining to data privacy and compliance issues are upheld
• Coordinate the development, maintenance, and enforcement of Information Security policies and standards
• Develop and enhance Oscar’s information security management framework
• Partner with business stakeholders across the company to raise awareness of risk management concerns
• Align and enforce the requirements of Oscar’s security posture with compliance requirements
• Raise security awareness and culture across the company
• Maintain and coordinate ongoing internal audit processes and control validation assessments
• Provide overall responsibility for security incident response activities and act as the control point during significant events
• Prevent compromises and ensure that the data collectively remains safe by proactively identifying hackers
• The CISO would be responsible for directing, defining, and implementing the company security program and overall cybersecurity strategy for the enterprise in order to effectively manage risk, respond to incidents, maintain continuity of operations, and safeguard the organization to keep Oscar’s member, employee and IP information safe
• Partner with cross functional leaders on the overall business technology planning, providing a current knowledge and future vision of the security implications for technology, systems and the software development life cycle
• Ensure security standards and implementation of cloud platform controls
• Establish a governance framework aligned with industry standards that delivers an approach and strategy to effectively implement cyber risk management from any potential risks, coordinating with enterprise risk management

Qualifications

• A demonstrated knowledge of security standards, relevant legal and regulatory requirements related to security and data confidentiality, and other various security standards and policies (e.g. HIPAA, PCI, PII, SOX/SOC)
• 15+ years of security leadership experience
• Strong interpersonal and communication skills with the ability to influence at all levels of the organization, while being able to simplify complex topics for understanding and critical decision making by Executive Management and the Board
• Key industry certifications in Security (such as CISSP and CISM)
• Experience building and leading mature security programs in a cloud-native DevOps environment

Bonus Points

• Prior work experience in or understanding of security challenges specific to the healthcare or health insurance industries

This is an authentic Oscar Health job opportunity. Learn more about how you can safeguard yourself from recruitment fraud here.
At Oscar, being an Equal Opportunity Employer means more than upholding discrimination-free hiring practices. It means that we cultivate an environment where people can be their most authentic selves and find both belonging and support. We're on a mission to change health care -- an experience made whole by our unique backgrounds and perspectives..
Pay Transparency
Final offer amounts, within the base pay set forth above, are determined by factors including your relevant skills, education, and experience.
Full-time employees are eligible for benefits including: medical, dental, and vision benefits, 11 paid holidays, paid sick time, paid parental leave, 401(k) plan participation, life and disability insurance, and paid wellness time and reimbursements.
Reasonable Accommodation
Oscar applicants are considered solely based on their qualifications, without regard to applicant’s disability or need for accommodation. Any Oscar applicant who requires reasonable accommodations during the application process should contact the Oscar Benefits Team ([email protected]) to make the need for an accommodation known.