Information Security Manager

Summary

Join Sword Health, a Forbes Best Startup Employer, as a Senior Manager, Information Security. You will set the strategic direction for information security, overseeing various initiatives and programs. This role involves leading incident response, ensuring cloud security, and managing a team of Security Engineers. You will collaborate with technical teams and stay updated on security threats. Sword Health offers a stimulating, fast-paced environment with opportunities for career development and growth, along with competitive salary and benefits.

Requirements

• Minimum of 8 years of related experience with a Bachelor's degree; or 6 years and a Master's degree; or equivalent experience
• Experience working in companies with security certifications such as ISO 27001 or SOC 2
• Familiarity with cloud platforms, especially Google Cloud Platform (GCP) or Amazon Web Services (AWS)
• Familiarity with Kubernetes and Infrastructure-as-Code practices
• Understanding of compliance requirements, especially HIPAA and GDPR
• Excellent communication and collaboration skills
• Strong problem-solving and analytical skills
• Proven ability to work in a fast-paced environment and manage multiple projects simultaneously
• Strong attention to detail and ability to deliver high-quality work

Responsibilities

• Collaborate closely with the Director of Risk and Compliance to define and oversee the execution of the company's information security strategy, ensuring alignment with business goals and compliance standards
• Coordinate and manage various security initiatives, from risk assessments to security tool implementations, ensuring timely completion and effectiveness
• Lead the incident response process, ensuring that security breaches or vulnerabilities are addressed promptly and effectively
• Ensure that all cloud-based applications, infrastructure, and data (hosted primarily in GCP with some assets in AWS) are secure and compliant with industry standards
• Directly manage and develop a dedicated team of 4-6 Security Engineers, fostering a culture of continuous improvement, skill development, and high performance. Ensure your team is empowered to take initiative, innovate, and effectively contribute to the company’s security posture
• Work closely with technical teams, especially those in Infrastructure and Data, to ensure security best practices are integrated throughout the organization. Facilitate efficient interactions with other teams as necessary, especially given the company's global presence
• Stay updated on the latest security threats, trends, and technologies to ensure the company's security measures are up-to-date and effective

Preferred Qualifications

• Preferred certifications include CISSP, CISM, PMP, and other relevant security or project management certifications
• Experience working with Security tools such as Snyk, Wiz, SentinelOne, Croudstrike, Expel, Sophos MDR, Qualys, Nessus (including open-source alternatives)
• Experience working in companies with security certifications such as PCI-DSS, HITRUST, or FedRamp

Benefits

• A stimulating, fast-paced environment with lots of room for creativity
• A bright future at a promising high-tech startup company
• Career development and growth, with a competitive salary
• The opportunity to work with a talented team and to add real value to an innovative solution with the potential to change the future of healthcare
• A stimulating environment with room for creativity
• A flexible environment where you can control your hours (remotely) with unlimited vacation
• Access to our health and well-being program (digital therapist sessions)
• Remote or Hybrid work policy
• Health, dental and vision insurance
• Meal allowance
• Equity shares
• Remote work allowance
• Flexible working hours
• Work from home
• Unlimited vacation
• Snacks and beverages
• English class
• Unlimited access to our Learning Platform