Security Operations Lead jobs in United States
cer-icon
Apply on Employer Site
company-logo

Freshpaint · 1 month ago

Security Operations Lead

Freshpaint is a company focused on enabling healthcare companies to collect, safeguard, and activate patient data in a compliant way. They are seeking a Security Operations Lead to manage and improve their operational security initiatives, including compliance programs and security audits.

AnalyticsData MiningInformation ServicesMarketingSoftware
badNo H1Bnote

Responsibilities

Own and manage Freshpaint’s recurring security compliance programs, including SOC 2 Type II, HITRUST R2, and other certifications or audits as needed
Coordinate and manage annual penetration tests and follow through on remediation activities
Maintain and continuously improve Freshpaint’s security controls and documentation
Partner with engineering and product teams to operationalize security best practices across systems, tools, and processes
Support risk assessments, vendor security reviews, and internal audits
Act as a key point of contact for external auditors, customers, and vendors on security-related matters
Drive security awareness and education initiatives across the company

Qualification

Security operationsGRC complianceSOC 2HITRUST R2Penetration testingCloud infrastructureCross-functional communicationRelevant certificationsProject managementDetail-oriented

Required

3+ years of experience in security operations, GRC, or compliance at a SaaS or cloud-based company
Strong understanding of security frameworks and standards (SOC 2, HITRUST, ISO 27001, etc.)
Experience managing audits and working directly with assessors and penetration testing vendors
Familiarity with cloud infrastructure (AWS, GCP) and modern software development practices
Excellent project management and cross-functional communication skills
You're organized, detail-oriented, and excited by the challenge of building scalable security programs in a fast-moving environment

Preferred

Experience with automation tools for evidence collection or continuous compliance
Prior experience working in a startup or high-growth environment
Relevant certifications (CISA, CISSP, CISM, or HITRUST CCSFP)

Benefits

Competitive pay + generous equity (10-year exercise window)
Fully remote (U.S. only) with a $150/month coworking stipend
Half-day Fridays, every Friday
Unlimited PTO—with a required 2-week minimum
Top-tier health, dental & vision (100% covered for you, 80% for dependents)
2 “Treat Yourself” days a year—$100 and a day off, just because
Generous parental leave
Epic offsites twice a year (past trips: Greece, Jackson Hole, Cabo, wine country + more)

Company

Freshpaint

twittertwittertwitter
company-logo
Freshpaint is a data platform that facilitates marketing by collecting customer data.

Funding

Current Stage
Growth Stage
Total Funding
$46.85M
Key Investors
ThresholdIntel CapitalY Combinator
2024-07-16Series B· $30.7M
2022-11-16Series A· $9.5M
2022-11-16Debt Financing· $5M

Leadership Team

leader-logo
Michael Malis
Founder
linkedin
leader-logo
Ray Mina
CMO
linkedin
Company data provided by crunchbase