onsite
Director of Security & Compliance - Verse Medical
Engineering Manager
Lead enterprise security and compliance for a fast‑growing healthcare platform, driving policy, risk mitigation, and regulatory alignment across cloud and on‑prem environments.
About the role
Key Responsibilities
- Develop and execute a comprehensive security strategy that protects patient data and meets HIPAA, HITECH, and other healthcare regulations.
- Lead risk assessments, vulnerability management, and incident response across multi‑cloud and hybrid infrastructures.
- Establish and maintain security policies, standards, and controls, ensuring alignment with industry best practices and audit requirements.
- Collaborate with engineering, product, and operations teams to embed security into the software development lifecycle.
- Oversee third‑party risk management, vendor security reviews, and compliance certifications (e.g., SOC 2, ISO 27001).
Requirements
- 10+ years of experience in information security, with at least 5 years in a leadership role within the healthcare or SaaS industry.
- Proven track record managing cloud security (AWS, Azure, GCP) and implementing secure DevOps practices.
- Strong communication skills, able to translate complex security concepts to executive stakeholders.
- Relevant certifications such as CISSP, CISM, or CISA are highly desirable.