VP of Engineering, Chief Information Security Officer (CISO)

$295,500 - $370,000/Yr

Collective Health - San Francisco, CA

Full-time - Senior

Hybrid - San Francisco, CA

Ambulatory Health Care Services

About the position

The CISO and Vice President of Engineering at Collective Health will oversee the strategic direction, development, and operation of the company's Cyber Security, Cloud infrastructure & SRE, and IT practices. This role requires a visionary leader who can drive innovation, optimize processes, and ensure the security and reliability of systems while collaborating with various teams to align security resources with business needs.

Responsibilities

• Develop and implement a comprehensive security and IT/cloud infrastructure strategy that supports the company's overall business objectives.
• Lead, mentor, and manage a high-performing team of security SRE and IT professionals.
• Foster a culture of innovation, continuous improvement, and collaboration within the department.
• Establish and maintain an enterprise-wide information security management program with clear policies and procedures.
• Update and guide senior leadership and the Board of Directors on current cyber threats, issues, and risks.
• Oversee the information security organization with an emphasis on the effectiveness of security controls.
• Manage security incidents and events, including containment and communication across business functions.
• Establish and maintain disaster recovery and business continuity plans.
• Oversee the development and implementation of DevSecOps practices to improve software delivery and operational efficiency.
• Ensure high reliability and uptime for cloud applications.
• Oversee the management and maintenance of IT infrastructure, including networks, servers, databases, and cloud environments.
• Develop and manage the departmental budget, ensuring cost-effective use of resources.
• Collaborate with other departments to understand their IT needs and provide solutions.

Requirements

• Bachelor's degree in Computer Science, Information Technology, or a related field; Master's degree preferred.
• 15+ years of experience leading teams with at least 5 years in a Director and above role leading cyber security teams in a product development environment.
• Strong security architecture background with experience building and driving a cyber security strategy and framework.
• Knowledge of common information security management frameworks, such as ISO/IEC 27001, NIST, HITRUST, and HIPAA compliance requirements.
• Experience with leading control assessments such as SOC 1/SOC 2.
• Deep healthcare expertise and Security certifications such as CISSP are preferred.
• 5+ years of experience building cloud infrastructure in AWS and automating infrastructure through infrastructure as code practices.
• Strong understanding of cloud technologies, cybersecurity, and IT best practices.
• Experience with GCP will be nice to have.
• Excellent leadership, communication, and interpersonal skills.
• Ability to think strategically and align IT initiatives with business goals.
• Strong problem-solving and decision-making skills.
• Experience in budget management and resource allocation.

Nice-to-haves

• Experience with GCP will be nice to have.

Benefits

• Health insurance
• 401k
• Paid time off
• Stock options