Cybersecurity Program Lead for AI SaaS Platforms

Mednition; Burlingame (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Mednition is seeking a Cyber Security Manager to lead the Information Security Program across our AI SaaS platform, including KATE Triage and KATE Sepsis. You will govern GRC, HIPAA/SOC2 audits, and secure cloud and EHR data integrations, aligning with FDA SaMD and NIST RMF guidelines.

The role requires collaboration with senior management, IT teams, and auditors, with a focus on secure data pipelines for HL7/FHIR and ongoing security improvements.

Qualifications

• Proven experience in managing information security programs and teams.
• Strong knowledge of governance, risk management, and compliance principles and practices.
• In-depth knowledge of cloud cybersecurity operations (GCP, MongoDB Atlas, Cloud Run, Kubernetes), container security, CI/CD pipeline security, and SIEM.
• Familiarity with healthcare data privacy and security standards (HIPAA, SOC2 Type 2, FDA SaMD regulations, NIST AI RMF, HL7/FHIR).
• Excellent communication and collaboration skills, with the ability to engage stakeholders at all levels.
• Strong project management and organizational skills, with the ability to prioritize tasks and manage multiple initiatives.
• Experience with security audit processes and frameworks.
• Commitment to staying up-to-date with industry trends and advancements in cyber security.

Responsibilities

• Build, maintain, and continuously improve the Mednition Information Security Program with policies and procedures.
• Manage the GRC program to ensure regulatory compliance and standards.
• Oversee IT security across cloud environments, Kubernetes clusters, and MongoDB Atlas databases with monitoring and SIEM.
• Supervise security monitoring, vulnerability assessments, incident response, and maintenance activities.
• Provide security recommendations to development teams through briefings with stakeholders.
• Ensure HIPAA, SOC2 Type 2 audits, FDA SaMD cybersecurity requirements, and NIST AI RMF compliance.
• Communicate with senior management, IT teams, vendors, and auditors on security matters.
• Support secure data integration architectures for HL7/FHIR EHR data pipelines and PHI protection.
• Keep current with cyber security trends and promote security awareness across the organization.
• Collaborate with cross-functional teams to implement controls and address security incidents.

Skills

InfoSec leadership

GRC principles

Cloud security

Healthcare security

Communication

PM skills

Audit experience

Continuous learning

Education

Bachelor's degree in CS/InfoSec

Master's degree preferred

Tools

CISSP

CISM

CEH

Job description

Mednition is seeking a Cyber Security Manager to lead the Information Security Program across our AI SaaS platform, including KATE Triage and KATE Sepsis. You will govern GRC, HIPAA/SOC2 audits, and secure cloud and EHR data integrations, aligning with FDA SaMD and NIST RMF guidelines.

The role requires collaboration with senior management, IT teams, and auditors, with a focus on secure data pipelines for HL7/FHIR and ongoing security improvements.