Director of Information Security & Risk

Charlie Health, Inc.; New York (NY); On-site; USD 200,000 - 250,000; Full time

Job summary

Charlie Health is seeking a Director of Information Security to lead and mature our security program in a highly regulated healthcare setting. You will translate strategy into measurable priorities, grow the security team, and ensure scalable, compliant security across identity, cloud, data protection and governance.

You will partner with IT, Engineering, Compliance and Legal to embed secure-by-design practices, drive incident readiness, and manage risk in a fast-growing organization.

Qualifications

• 10+ years in information security, security engineering or related fields.
• 3+ years leading security teams or major programs.
• Experience building or scaling an enterprise security program.
• Broad technical experience across identity, endpoint, cloud, app security and data protection.
• Strong security architecture, control design, incident response and risk management.
• Experience in regulated environments and translating requirements into controls.
• Familiar with Zero Trust, least privilege and secure-by-design principles.

Responsibilities

• Lead security program priorities, roadmaps and measurable outcomes.
• Develop the Information Security team through hiring, coaching and planning.
• Establish security metrics, rhythms and reporting for risk visibility.
• Provide leadership across security engineering, operations and data protection.
• Embed secure-by-design practices with IT and Engineering to improve controls.
• Oversee incident readiness and response with internal and external partners.
• Ensure HIPAA, SOC 2, NIST compliance and regulatory alignment.
• Identify, assess and prioritize security risk based on business impact.
• Collaborate with Compliance, Legal, Privacy, Product and IT leadership.

Skills

Security leadership

Incident response

Zero Trust

Risk management

Identity security

Cross-functional work

Education

CISSP

CISM

CCSP

Tools

SIEM

MDR

DLP

Job description

Charlie Health is seeking a Director of Information Security to lead and mature our security program in a highly regulated healthcare setting. You will translate strategy into measurable priorities, grow the security team, and ensure scalable, compliant security across identity, cloud, data protection and governance.

You will partner with IT, Engineering, Compliance and Legal to embed secure-by-design practices, drive incident readiness, and manage risk in a fast-growing organization.