Aspiron Search · 8 hours ago

Head of Security

United States

Full-time

Remote

Director/Executive

Maximize your interview chances

Staffing & Recruiting

Insider Connection @Aspiron Search

Discover valuable connections within the company who might provide insights and potential referrals.
Get 3x more responses when you reach out via email instead of LinkedIn.

Responsibilities

Develop and execute the company’s overall security strategy, aligning it with business goals and industry best practices.

Establish and manage policies, procedures, and frameworks to ensure compliance with healthcare regulations (e.g., HIPAA, GDPR).

Lead efforts to secure the organization’s infrastructure, applications, and data against current and emerging threats.

Build and scale a robust incident response program, overseeing investigations and remediation of security incidents.

Collaborate with product and engineering teams to embed security into the software development lifecycle.

Manage third-party security assessments, audits, and penetration tests, ensuring identified risks are mitigated.

Drive security awareness and training programs to foster a culture of vigilance across the organization.

Stay ahead of emerging security trends and technologies, advising leadership on opportunities to enhance the company’s security posture.

Oversee and grow the security team, ensuring the right talent and resources are in place to support business growth.

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Information Security LeadershipHIPAA ComplianceCloud SecurityDevSecOps PracticesApplication SecurityData Protection PrinciplesSecurity Strategy DevelopmentIncident Response ManagementRisk ManagementStakeholder Education

Required

Extensive experience in information security leadership roles, preferably in startups or fast-growing companies.

Deep knowledge of healthcare industry regulations and compliance frameworks, including HIPAA and HITRUST.

Expertise in cloud security (AWS, GCP, or Azure) and modern DevSecOps practices.

Strong understanding of secure software development, application security, and data protection principles.

Proven track record of developing and implementing scalable security strategies.

Experience responding to security incidents and managing risk in high-pressure environments.

Exceptional communication skills, with the ability to influence and educate stakeholders at all levels.

A passion for fostering innovation while maintaining a security-first mindset.

Company

Aspiron Search

Aspiron Search is a niche-focused Cybersecurity search firm that works exclusively with venture-backed Cybersecurity firms placing Technical & GTM talent into North America.

Founded in 2021