Director - Product and Information Security

LogixHealth; Bengaluru; On-site; INR 3,500,000 - 7,500,000; Full time

Job summary

LogixHealth, in Bengaluru, seeks a senior security leader to own end-to-end product security, cloud and data center security, and SOC operations for a US health tech organization.

You will drive security governance, secure SDLC, and risk management while partnering with product, engineering, IT, and platform teams to embed security-by-design without compromising delivery and user experience.

Qualifications

• 15+ years of progressive experience across Product/Application Security, Cloud/Infrastructure Security, and SOC operations.
• Senior leadership experience (at least 3+ years) guiding security teams and budgets.
• Proven track record owning or leading a SOC function with incident response and governance.

Responsibilities

• Own end-to-end product/app security, cloud and data center security, and IT security for a US health tech org.
• Provide strategic and operational leadership for the SOC including detection, monitoring, incident response, escalation, and reporting.
• Establish and govern secure SDLC practices including threat modeling, SAST/DAST, dependency scanning, and remediation tracking.
• Own security architecture and controls across cloud, hybrid, and on-prem environments; ensure identity, network and data protection.
• Partner with product, engineering, IT, and platform teams to embed security-by-design without delaying delivery.
• Define and enforce information security governance, policies, and procedures aligned with healthcare regulations.
• Ensure HIPAA, SOC 2, HITRUST (preferred), ISO 27001 compliance and audit readiness.
• Lead incident response and crisis management, including tabletop exercises and post-incident reviews.
• Oversee vulnerability management, risk assessments, security testing, and remediation across all layers.
• Drive security automation across SOC, reporting, monitoring, and alerting to improve speed and scale.
• Maintain risk management and reporting frameworks for executive visibility.

Skills

Security leadership

Product/Application security

Cloud security

SOC operations

Incident response

Threat intelligence & detection

Security governance

Regulatory compliance

Tools

SAST

DAST

Dependency scanning

Penetration testing tools

Job description

Responsibilities:

• Own and lead end-to-end product/application security, cloud and data center security, and IT security for a US health tech organization.
• Provide strategic and operational leadership for the Security Operations Center (SOC), including detection, monitoring, incident response, escalation, and reporting.
• Establish and govern secure SDLC practices across all applications, including threat modeling, SAST, DAST, dependency scanning, penetration testing, and remediation tracking.
• Own security architecture and controls across cloud platforms, hybrid infrastructure, and on-prem data centers, ensuring strong identity, network, and data protection.
• Partner closely with product, engineering, IT, and platform teams to embed security-by-design without slowing product delivery or impacting patient/user experience.
• Define, implement, and enforce information security governance, policies, standards, and procedures aligned with healthcare regulatory requirements.
• Ensure continuous compliance and audit readiness for HIPAA, SOC 2, HITRUST (preferred), ISO 27001, and other applicable US healthcare regulations.
• Lead incident response and crisis management, including tabletop exercises, breach simulations, regulatory notifications, and post-incident reviews
• Oversee vulnerability management, risk assessments, security testing, and remediation across applications, infrastructure, endpoints, and third-party vendors.
• Drive security automation across SOC operations, compliance reporting, control monitoring, and alerting to improve speed, accuracy, and scale.
• Build and maintain strong risk management and reporting frameworks, providing clear visibility into security posture, key risks, and mitigation progress to executive leadership.
• Foster a strong security-first culture through ongoing awareness programs, phishing simulations, workshops, and targeted training for technical and non-technical teams.
• Lead, mentor, and scale a high-performing security, compliance, and SOC team, ensuring clear accountability, skill development, and succession planning.
• Manage relationships with security vendors, MSSPs, auditors, regulators, and external partners, ensuring SLA adherence and cost-effective outcomes.
• Act as a trusted advisor to executive leadership on security risks, regulatory exposure, and business trade-offs in a healthcare environment.

Requirements:

• 15+ years of progressive experience across Product/Application Security, Cloud/Infrastructure Security, and SOC operations, with at least 3+ years in a senior leadership capacity.
• Demonstrated experience owning or leading a SOC function, including incident response, threat detection, security monitoring, and operational governance.
• Proven ability to define and execute cybersecurity strategy, roadmap, and long-term security vision.
• Strong balance of strategic leadership and hands-on execution, with the ability to drive both direction and delivery.
• Proven expertise in application security, including penetration testing, secure SDLC, DevSecOps, vulnerability management, and secure architecture principles.
• Deep expertise in cloud security controls across AWS, Azure, and GCP, including container and Kubernetes security
• Strong experience in security governance, compliance, and risk management, including ISO 27001 / ISO 2700x, SOC 2, GDPR, HIPAA, HITRUST, and audit readiness.
• Demonstrated experience embedding security controls and best practices into engineering workflows and driving adoption across development teams.
• Proven ability to work cross-functionally with engineering, DevOps, legal, compliance, risk, and business stakeholders.
• Strong ability to communicate and influence executives, auditors, regulators, and cross-functional leadership teams.
• Excellent analytical, problem-solving, and people leadership skills, with a strong bias toward ownership, accountability, and measurable outcomes.