Director of Information Security

About the Role

The Director of Information Security is responsible for leading the execution and continued maturity of Charlie Health’s information security program. Reporting to the VP of IT & CISO, this role will lead the Information Security team, translate security strategy into measurable outcomes and ensure security capabilities scale with the business.

This role requires broad leadership experience across security engineering, security operations, governance, risk, compliance, identity, cloud security, application security and data protection. The Director will work closely with IT, Engineering, Compliance, Legal, Privacy, Product and business leadership to reduce risk while enabling Charlie Health to move quickly and safely.

Charlie Health operates in a highly regulated healthcare environment. This role will help ensure security capabilities align with HIPAA, SOC 2, NIST, Zero Trust principles and other applicable regulatory and contractual requirements.

Responsibilities

Key Responsibilities

Security Program Leadership

Translate CISO and executive strategy into clear priorities, roadmaps and measurable security outcomes

Lead and develop the Information Security team, including hiring, coaching, performance management and organizational planning

Establish security metrics, operating rhythms and reporting that provide clear visibility into risk, control maturity and program performance

Security Engineering & Operations

Provide leadership across security engineering, architecture, security operations, incident response, identity, cloud, application security and data protection

Partner with IT and Engineering to embed secure-by-design practices, automation and modern engineering practices that improve control effectiveness, consistency and operational efficiency

Lead security incident readiness and response, including coordination with internal teams, managed security providers and external partners

Governance, Risk & Business Partnership

Lead operational security capabilities supporting HIPAA, SOC 2, NIST and other applicable requirements

Identify, assess and prioritize security risk based on business impact, materiality and organizational priorities

Partner with leaders across Compliance, Legal, Privacy, Product, IT and Engineering to integrate security into business and technology decisions

Requirements

Required Qualifications

10+ years of progressive experience in information security, security engineering, security operations or related disciplines

3+ years of experience leading security teams or major security programs

Demonstrated experience building, scaling or materially improving an enterprise information security program

Broad technical experience across multiple security domains including identity, endpoint, SaaS, cloud, application security, security operations and data protection

Strong understanding of security architecture, control design, incident response and risk management

Experience operating in a regulated environment and translating regulatory requirements into practical controls

Strong understanding of Zero Trust, least privilege, identity-centric security and secure-by-design principles

Strong leadership, communication, judgment and cross-functional collaboration skills

Ability to operate effectively in a high-growth environment with significant change and competing priorities

You live within a 75-minute commute of our NYC office (near Union Square) and are able to work in-office 4 days per week

Preferred Qualifications

Experience in healthcare, financial services or another highly regulated industry

Experience supporting HIPAA, SOC 2, NIST, ISO 27001 or similar frameworks

Experience leading multidisciplinary security teams

Experience with enterprise identity, endpoint, cloud, SIEM, MDR, DLP and application security platforms

Experience securing enterprise AI tools, LLM platforms or AI-enabled workflows

Relevant certifications such as CISSP, CISM, CCSP or equivalent experience

Benefits

Charlie Health is pleased to offer comprehensive benefits to all full-time, exempt employees. Read more about our benefits here.

Additional Information

The total target base compensation for this role will be between 200,000 - $250,000 per year at the commencement of employment. In addition to base compensation, this role also offers a performance bonus. Please note, pay will be determined on an individualized basis and will be impacted by location, experience, expertise, internal pay equity, and other relevant business considerations. Further, cash compensation is only part of the total compensation package, which, depending on the position, may include stock options and other Charlie Health-sponsored benefits.  #LI-Hybrid