Head of Security Engineering

Candid Health; San Francisco (CA); On-site; USD 180,000 - 280,000; Full time

Job summary

Candid Health is seeking the first dedicated security leader to build and guide our security program. You will shape teams and systems that protect customer data and patient information, partnering with Engineering and Product leadership to move fast without compromising data integrity.

As the initial security leader, you will own audits, risk management, and security culture across the company, while collaborating with enterprise customers and vendors to ensure robust security postures.

Qualifications

• 10+ years of security engineering leadership experience
• Proven ability to build and run security programs
• Strong understanding of HIPAA and regulatory compliance
• Ability to align security with business goals

Responsibilities

• Scale and lead a Security Engineering Organization with top-tier engineers
• Own the security roadmap from foundational posture to enterprise-grade
• Prioritize security initiatives with executive leadership and strategy
• Oversee HIPAA, SOC 2/1, PCI, and HITRUST audits and processes
• Educate and empower ~200 employees on security practices and culture
• Manage third-party security testing and vendor risk reviews

Job description

The Role

You will be the first dedicated security leader at Candid Health. You won't just be managing a checklist; you will be building the team and systems that protect our customers and their patients. You will partner closely with our Engineering and Product leadership to ensure that we move fast without breaking our promise of data integrity.

You will be the first dedicated security leader at Candid Health. You won't just be managing a checklist; you will be building the team and systems that protect our customers and their patients. You will partner closely with our Engineering and Product leadership to ensure that we move fast without breaking our promise of data integrity.

What You'll Do

• Scale and Lead a Security Engineering Organization: Interview, hire, and manage a team of top flight security engineers that will expansively own Risk, Compliance, Threat Management, Product and Application Security.


• Build and Own the Security Roadmap: Lead the transition from foundational security posture to one defined by a best in class, enterprise-grade security organization.


• Drive Security Prioritization at a Leadership Level: Act as the subject matter expert and voice in the room that is setting the prioritization of security initiatives and stack ranking the risks as well as advising Candid's strategy to mitigate them in direct partnership with our executive leadership team.


• Lead Trust & Transparency Efforts: Understand, oversee, and drive the rituals associated with HIPAA, SOC2, SOC1, PCI and HITRUST; this role will entail not just audits, but living processes. You will often be the technical voice in the room with our largest enterprise customers.


• Act as a Security Evangelist and Culture Carrier: Educate and empower our 200 employees. From engineering practice to legal contracts, you will collaborate with virtually every team at Candid Health to promote the ethos that we are a security first, compliant organization.


• Manage Third-party Relationships: Coordinate with vendors for penetration testing and other security services, ensuring that our platforms undergo regular scrutiny and remain fortified, review vendor security prior to integration.

Who You Are

• You have 10+ years of experience in security engineering, with a proven track record of building and leading teams that own complex matrices of technical surface area in startup and scaled environments.


• Your expertise isn't just theoretical. You've had the hard conversations and driven the outcomes at an organizational scope, especially when it comes to the rituals and routines of security compliance.


• With strong knowledge of HIPAA, you're no stranger to the delicate information we handle.


• You are adaptable and flexible, always ready to engage with security challenges at both enterprise and customer levels.


• You know when to get your hands dirty and when to delegate. You possess the ability to read, understand, and audit systems, networks, and IT setups to ensure airtight security. That, combined with a keen sense for when to handoff ownership to someone with depth in the spaces that your breadth doesn't cover makes you an effective engineering leader.

Our values

We Spend At Least As Much Time With Our Coworkers As We Do With Our Closest Friends + Family - If We Intend To Do The Most Important + Challenging Work Of Our Lives, It's Important That These Folks Energize Us, Support Us, Inspire Us, And Push Us To Do Our Best Work. This Is What You Can Expect Of Your Teammates At Candid (in No Particular Order)

• We put our customers first


• We take care of each other and ourselves


• We anchor on outcomes and work relentlessly and creatively to achieve them


• We collectively prioritize building a diverse and inclusive workspace


• We believe humility is our greatest strength


• We are candid, kind, and committed


• We strive to be the most prepared person in the room


• We are truth seekers