Job Title: Director of Cybersecurity
Location: Dallas, TX (preferred) / Hybrid
Job Summary: We are seeking an experienced and hands-on Director of Cybersecurity to lead our cybersecurity initiatives at a dynamic and fast-growing Healthcare SaaS company of 700-800 employees. Reporting directly to the CTO, this role requires a strategic thinker with the technical prowess to implement and maintain robust cybersecurity defenses in a fast-paced startup environment. The ideal candidate will have an extensive background as a cybersecurity professional within SaaS or software product companies and a proven track record of managing and evolving cybersecurity programs to protect company assets, data, and customer information.
Key Responsibilities:- Develop, implement, and monitor a comprehensive cybersecurity program that aligns with business objectives and mitigates security risks.
- Lead all aspects of cybersecurity operations, including threat detection, incident response, vulnerability management, and security compliance.
- Collaborate with cross-functional teams to establish cybersecurity best practices and ensure security is built into the development lifecycle.
- Conduct regular risk assessments, security audits, and penetration testing to identify and address vulnerabilities.
- Lead incident response efforts, including forensic investigations, root cause analysis, and corrective action planning.
- Stay current with emerging cybersecurity threats, industry trends, and regulatory requirements to continually enhance the company's security posture.
- Develop and enforce security policies, standards, and protocols to ensure compliance with applicable regulations (e.g., HIPAA, SOC 2).
- Mentor and guide a team of cybersecurity professionals, fostering a collaborative, high-performance culture.
Qualifications:- Experience: 8-10 years in cybersecurity, with a background in Healthcare.
- Industry Experience: Experience in a Healthcare SaaS or software product that operates in a fast-paced, startup-style environment is highly preferred.
- Technical Skills:
- Hands-on expertise in threat detection, incident response, vulnerability management and assessment, and security architecture.
- Strong IAM experience with SSO and MFA
- Solid experience with NIST Cybersecurity Framework, HITRUST, and ISO 27001
- Strong understanding of network security, cloud security, and secure software development practices.
- In-depth understanding of HIPAA
- Education: Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field; relevant certifications (e.g., CISSP, CISM, CEH) are a plus.
- Soft Skills: Strong leadership and communication skills; ability to collaborate effectively with technical and non-technical stakeholders; a proactive, problem-solving mindset.
