Senior Manager, Security

Summary

Join Maven Clinic, a leading virtual clinic for women and families, as a Senior Manager, Security. You will play a crucial role in developing and implementing a comprehensive security program to protect our data, systems, and reputation. This involves collaborating with various teams, conducting risk assessments, leading incident responses, and ensuring compliance with industry standards. You will also mentor team members and promote a security-first culture. The ideal candidate possesses extensive experience in security management, strong leadership skills, and a deep understanding of security principles and technologies. Maven offers a competitive salary and benefits package, including stock options and comprehensive health and wellness programs.

Requirements

• Bachelor's degree in Computer Science, Information Systems, or a related field
• Minimum of 8+ years of management experience in security (or related role)
• Strong understanding of security principles, practices, and frameworks, including experience at various levels of security including physical, network, application, data, cloud, and others
• Strong history as a leader with excellent communication and analytical skills
• Proficiency with security technologies such as SIEM, firewalls, IDS/IPS, encryption, and cloud security tools
• Risk Management: Strong knowledge of risk management frameworks, industry standard certifications (e.g., SOC 2, HITECH), regulatory requirements (e.g., GDPR, CCPA), and industry standards (e.g., ISO 27001, NIST)

Responsibilities

• Develop, implement, and maintain a comprehensive security strategy across multiple areas of focus
• Conduct regular risk assessments to identify potential vulnerabilities, threats, and develop mitigation plans
• Lead and coordinate incident response efforts, ensuring timely and effective resolution
• Ensure adherence to security frameworks such as SOC 2, ensuring the organization meets industry standards for security
• Develop and deliver security awareness training programs to employees
• Security Architecture and Engineering: Collaborate with engineering and IT teams to design and implement secure systems and infrastructure
• Provide mentorship, set performance goals, and foster a culture of security awareness across the organization
• Ensure that third-party systems and services meet Maven’s security standards and do not introduce unnecessary risks
• Security Awareness and Training: Develop and deliver security awareness programs to educate employees about security best practices, social engineering threats, and the importance of data protection
• Promote a security-first culture throughout the organization
• Continuous Improvement: Continuously assess and improve the organization’s security posture by staying current with the latest cybersecurity trends, threats, and technologies
• Implement advanced security measures to anticipate and mitigate potential threats

Preferred Qualifications

• Experience working with high growth companies and start-ups
• Digital health or telehealth experience
• Experience with data privacy compliance
• Ability to work effectively with cross-functional teams, including engineering, legal, compliance, and executive leadership
• Ability to thrive in a fast-paced, dynamic environment with multiple competing priorities
• Google Docs, Ironclad, Asana, and slack familiarity
• Sense of humor

Benefits

• Maven for Mavens: access to the full platform and specialists, including care for mental health, reproductive health, family planning and pediatrics
• Whole-self care through wellness partnerships
• Hybrid work, in office meals, and work together days
• 16 weeks 100% paid parental leave and new parent stipend (for Mavens who've been with us for six months plus)
• Annual professional development stipend and access to a personal career coach through Maven for Mavens
• 401K matching for US-based employees, with immediate vesting
• Employer-covered health, dental, and insurance plan options