Hybrid Information Security Leader | HIPAA, SOC & Risk

HABERFELD HOLDINGS INC; Lincoln (NE); Hybrid; USD 110,000 - 150,000; Full time

Benefits offered by this job

ESOP

401(k)

Medical insurance

Paid parental leave

Flexible hybrid work

Onsite fitness facility

Job summary

Haberfeld is seeking an experienced Information Security Officer to lead our security program across the organization. Hybrid work arrangement requires 3 days per week in Lincoln, Nebraska, with ESOP-backed ownership and a strong focus on governance, risk, and compliance.

You will collaborate across departments to safeguard data, clients, and operations while enabling growth. Responsibilities include risk management, incident response, and regulatory audits, aligning security with business

Qualifications

• Experience building and maturing information security programs.
• Familiarity with NIST, HIPAA, and SOC requirements.
• Ability to perform risk assessments and vendor evaluations.
• Strong communication and presentation skills.

Responsibilities

• Own and mature Haberfeld's information security program.
• Lead risk assessments and maintain risk register.
• Coordinate SOC/SSAE18 audits and HIPAA assessments.
• Oversee incident response and remediation actions.
• Manage vendor security reviews and third-party risk.

Skills

Security governance

Policy writing

Risk assessment

Vendor risk

Communication

Education

Bachelor's degree in information security

Tools

Microsoft 365 Security

Defender

Entra ID

Azure security services

Job description

Haberfeld is seeking an experienced Information Security Officer to lead our security program across the organization. Hybrid work arrangement requires 3 days per week in Lincoln, Nebraska, with ESOP-backed ownership and a strong focus on governance, risk, and compliance.

You will collaborate across departments to safeguard data, clients, and operations while enabling growth. Responsibilities include risk management, incident response, and regulatory audits, aligning security with business