Cyber Security Program Lead - GRC & Healthcare Compliance

Mednition; Burlingame (IL); On-site; USD 150,000 - 190,000; Full time

Job summary

Mednition is seeking a Cyber Security Manager to lead and continuously improve the company’s Information Security Program across its AI SaaS platform, including KATE Triage and KATE Sepsis. You will oversee GRC, HIPAA and SOC2 Type 2, cloud security in GCP and MongoDB Atlas, and HL7/FHIR data protections.

You will guide security architecture, incident response, and regulatory alignment with FDA SaMD, NIST RMF, and change control plans, while collaborating with senior management and engineering

Qualifications

• Bachelor's degree in computer science, information security, or a related field.
• Master's degree preferred.
• CISSP/CISM/CEH certifications welcomed.

Responsibilities

• Build, maintain, and improve the Information Security Program.
• Manage the GRC program to ensure regulatory compliance.
• Oversee security across cloud environments and databases, incl. GCP and MongoDB Atlas.
• Supervise security monitoring, vulnerability assessments, and incident response.
• Communicate security requirements to development teams and stakeholders.
• Ensure HIPAA, SOC2 Type 2, FDA SaMD, and NIST RMF alignment.
• Collaborate with senior management, IT, vendors, and auditors.
• Manage secure HL7/FHIR EHR data pipelines protecting PHI.
• Stay updated on cyber security trends and best practices.
• Promote security awareness and cross-functional collaboration.

Skills

Information security programs

Governance

Risk management

Compliance

Cloud security operations

GCP

Kubernetes

SIEM

HIPAA privacy & security

Stakeholder communication

Project management

Education

Bachelor's degree in CS/Info Security

Master's degree preferred

CISSP

CISM

CEH

Tools

Kubernetes

Cloud Run

MongoDB Atlas

HL7/FHIR security

Job description

Mednition is seeking a Cyber Security Manager to lead and continuously improve the company’s Information Security Program across its AI SaaS platform, including KATE Triage and KATE Sepsis. You will oversee GRC, HIPAA and SOC2 Type 2, cloud security in GCP and MongoDB Atlas, and HL7/FHIR data protections.

You will guide security architecture, incident response, and regulatory alignment with FDA SaMD, NIST RMF, and change control plans, while collaborating with senior management and engineering