Cyber Security Lead: GRC, Cloud Security & AI RMF

Mednition; Burlingame (CA); On-site; USD 140,000 - 230,000; Full time

Job summary

Mednition is seeking a Cyber Security Manager to lead and mature the information security program for our AI SaaS platform, including KATE Triage and KATE Sepsis integrations. You will own GRC, HIPAA, and SOC 2 Type 2 readiness, while guiding security across GCP, Kubernetes, and MongoDB Atlas architectures.

Collaboration with FDA SaMD and NIST RMF teams is required. You will interface with senior management and development teams to embed security into pipelines, respond to threats, and maintain

Qualifications

• Bachelor's degree in computer science, information security, or a related field.
• Professional certifications such as CISSP, CISM, or CEH are preferred.
• Demonstrated experience leading security programs and teams in a SaaS/Cloud environment.

Responsibilities

• Lead the information security program across an AI SaaS platform and EHR integrations.
• Oversee GRC activities, HIPAA compliance, and SOC 2 Type 2 readiness.
• Manage security across GCP, Kubernetes, and MongoDB Atlas environments.
• Coordinate external audits and regulatory alignment with FDA SaMD and NIST RMF.
• Collaborate with stakeholders to implement security controls and incident response.

Skills

Security program management

Governance, risk & compliance

Cloud security (GCP)

Kubernetes security

HIPAA & SOC 2 expertise

Stakeholder communication

Education

Bachelor's degree in CS or related field

CISSP or equivalent certification

Tools

GCP

Kubernetes

MongoDB Atlas

SIEM

Job description

Mednition is seeking a Cyber Security Manager to lead and mature the information security program for our AI SaaS platform, including KATE Triage and KATE Sepsis integrations. You will own GRC, HIPAA, and SOC 2 Type 2 readiness, while guiding security across GCP, Kubernetes, and MongoDB Atlas architectures.

Collaboration with FDA SaMD and NIST RMF teams is required. You will interface with senior management and development teams to embed security into pipelines, respond to threats, and maintain