As the Information Security Officer for Televox (HarrisCX), you will oversee all aspects of our information security program. This strategic role involves designing and implementing comprehensive security strategies, leading internal audits, and ensuring our operations comply with critical industry standards like HIPAA, HITRUST, and SOC 2.
You will be a key contributor to our security posture, fostering collaboration across teams and representing our commitment to data protection.
The position is fully remote and eligible to anyone in the U.S.
What your impact will be:
- Oversee the design, implementation, and continuous improvement of the organization’s information security strategies, policies, and architecture.
- Ensure and maintain compliance with key industry standards and regulations, including HIPAA, HITRUST, and SOC 2.
- Lead the development and execution of the security incident response plan, including managing security incidents and conducting post-mortem analysis to prevent recurrence.
- Conduct and lead internal security audits and risk assessments to identify vulnerabilities and ensure adherence to security standards.
- Respond to customer security audits and Requests for Proposals (RFPs), clearly articulating our security posture and compliance controls.
- Champion a culture of security by developing and delivering engaging security awareness and training programs for all employees.
- Manage the third-party vendor security assessment program to ensure partners and suppliers meet our security standards.
- Collaborate with IT and engineering teams to ensure security controls are properly implemented throughout the development lifecycle and within our cloud infrastructure.
- Regularly report on the status and effectiveness of the information security program to senior leadership and key stakeholders.
What we look for:
- 8+ years of progressive experience in an information security role, with a focus on governance, risk, and compliance.
- Demonstrated, in-depth experience with security and compliance frameworks such as HIPAA, HITRUST, and SOC 2 is required.
- Proven experience developing and managing an incident response program.
- Strong understanding of network security, application security, and cloud security principles (preferably in an AWS or Azure environment).
- Experience conducting comprehensive risk assessments and managing a vulnerability management program.
- Excellent communication, leadership, and interpersonal skills, with the ability to translate complex security concepts for technical and non-technical audiences.
- Post-secondary education in Information Security, Computer Science, or equivalent relevant work experience.
What Would Make You Stand Out
- Professional security certifications such as CISSP, CISM, CISA, or CRISC.
- Experience working within a SaaS (Software as a Service) or healthcare technology company.
- Familiarity with data privacy regulations beyond HIPAA, such as CCPA/CPRA.
What We Offer
- 3 weeks' vacation and 5 personal days
- Comprehensive medical, dental, and vision benefits starting from your first day
- Employee stock ownership and RRSP/401k matching programs
- Lifestyle rewards
- Flexible work arrangements and opportunities for community involvement
Compensation Details
The potential salary range for this role is $140-150K, per year will be based on experience, skills, market conditions, and internal equity.
