Senior Manager, Security

Summary

Join Maven Clinic as a Senior Manager, Security and play a crucial role in developing and implementing a comprehensive security program. You will lead risk assessments, incident response, and ensure adherence to security frameworks like SOC 2. Collaborate with engineering and IT teams to design secure systems and mentor the security team. This role requires strong communication, analytical skills, and experience with various security technologies. The position offers a competitive salary, stock options, and a comprehensive benefits package including health insurance, parental leave, professional development opportunities, and more. Maven Clinic is an award-winning company with a strong commitment to diversity and inclusion.

Requirements

• Bachelor's degree in Computer Science, Information Systems, or a related field
• Minimum of 8+ years of management experience in security (or related role)
• Strong understanding of security principles, practices, and frameworks, including experience at various levels of security including physical, network, application, data, cloud, and others
• Strong history as a leader with excellent communication and analytical skills
• Proficiency with security technologies such as SIEM, firewalls, IDS/IPS, encryption, and cloud security tools
• Risk Management: Strong knowledge of risk management frameworks, industry standard certifications (e.g., SOC 2, HITECH), regulatory requirements (e.g., GDPR, CCPA), and industry standards (e.g., ISO 27001, NIST)

Responsibilities

• Develop, implement, and maintain a comprehensive security strategy across multiple areas of focus
• Conduct regular risk assessments to identify potential vulnerabilities, threats, and develop mitigation plans
• Lead and coordinate incident response efforts, ensuring timely and effective resolution
• Ensure adherence to security frameworks such as SOC 2, ensuring the organization meets industry standards for security
• Develop and deliver security awareness training programs to employees
• Security Architecture and Engineering: Collaborate with engineering and IT teams to design and implement secure systems and infrastructure
• Provide mentorship, set performance goals, and foster a culture of security awareness across the organization
• Ensure that third-party systems and services meet Maven’s security standards and do not introduce unnecessary risks
• Security Awareness and Training: Develop and deliver security awareness programs to educate employees about security best practices, social engineering threats, and the importance of data protection
• Promote a security-first culture throughout the organization
• Continuous Improvement: Continuously assess and improve the organization’s security posture by staying current with the latest cybersecurity trends, threats, and technologies
• Implement advanced security measures to anticipate and mitigate potential threats

Preferred Qualifications

• Experience working with high growth companies and start-ups
• Digital health or telehealth experience
• Experience with data privacy compliance
• Ability to work effectively with cross-functional teams, including engineering, legal, compliance, and executive leadership
• Ability to thrive in a fast-paced, dynamic environment with multiple competing priorities
• Google Docs, Ironclad, Asana, and slack familiarity
• Sense of humor

Benefits

• Employer-covered health, dental, and insurance plan options
• Generous PTO
• Maven for Mavens: access to the full platform and specialists, including care for everything from mental health, reproductive health, family planning, pediatrics
• Whole-self care through wellness partnerships
• Weekly breakfast, lunch, and get-togethers
• 16 weeks 100% paid parental leave, flexible time upon return, and $1.5K/mo for 2 months, new parent stipend (for Mavens who've been with us at least six months)
• Annual professional development stipend and access to a personal career coach through Maven
• 401K matching for US-based employees (immediately vesting)