Information Security Leader: Strategy, Risk & Resilience

Help At Home, LLC; Northern (KY); Presencial; USD 220.000 - 250.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Comprehensive benefits

401(k) retirement plan

Paid time off and holidays

Employee assistance programs

Wellness initiatives

Flexible options to support balanced 삶

Descripción de la vacante

Help At Home, LLC seeks a Head of Information Security to lead enterprise security strategy, governance, risk management, and regulatory compliance across a national caregiving network. The role partners with IT, Legal, Compliance, Finance, and executive leadership to mature the security program and protect systems, data, and operations.

The position requires 12+ years in information security, including 3+ years leading teams, with hands-on incident response, vulnerability management, and vendor

Responsabilidades

• Own execution of the enterprise security strategy and roadmap, translating strategic direction into operating plans, priorities, and measurable outcomes.
• Lead and operate the day-to-day security program, including governance, risk management, security operations, and program metrics.
• Establish and maintain meaningful security metrics, key risk indicators, and reporting to support decision-making and transparency.
• Monitor emerging threats, legislation, and industry developments; assess risk exposure and drive timely mitigation.
• Own day-to-day security operations, including monitoring and detection, vulnerability management, security engineering, and incident response.
• Lead, hire, and develop the security team, including resource planning, coaching, and prioritization of work against business-critical objectives.
• Manage relationships with MSSPs, tooling partners, and other third-party security providers and ensure vendor performance meets expectations.
• Oversee identity and access management, cloud security, application security, and data protection programs.
• Ensure security participation in the software development lifecycle and embed security requirements into products, platforms, and vendor relationships.
• Maintain and update security policies, standards, and procedures, including policies governing the responsible use of AI.
• Participate in enterprise AI governance, partnering with IT, Legal, Compliance, and business leaders to assess AI use cases, define acceptable use, and manage data, model, and third-party AI risk.
• Partner with Finance, IT, and Internal Audit to remediate material weaknesses and strengthen IT general controls, including access management and change management.
• Own the security-related control environment and evidence and support internal and external audit, certification, and customer assurance activities.
• Ensure alignment with applicable regulatory requirements, including HIPAA and SOX, and recognized frameworks such as NIST CSF, ISO 27001, SOC 2, or CIS Controls.
• Lead business continuity planning (BCP) and disaster recovery alignment, working directly with business stakeholders to define critical processes, recovery objectives, and response plans.
• Lead incident response and crisis management readiness, including tabletop exercises and post-incident improvement.
• Support enterprise cyber risk management, including risk identification, assessment, mitigation, and monitoring.
• Oversee third-party and vendor security risk assessments.
• Support security due diligence for mergers, acquisitions, and integrations.
• Act as a trusted security resource for business and technology leaders, translating technical risk into clear, practical recommendations.
• Prepare and help present security materials for executive leadership and, as needed, the Board.
• Build working relationships with regulators, industry groups, and external security partners as needed.
• Lead cybersecurity awareness, education, and culture initiatives across the enterprise.

Descripción del empleo

Help At Home, LLC seeks a Head of Information Security to lead enterprise security strategy, governance, risk management, and regulatory compliance across a national caregiving network. The role partners with IT, Legal, Compliance, Finance, and executive leadership to mature the security program and protect systems, data, and operations.

The position requires 12+ years in information security, including 3+ years leading teams, with hands-on incident response, vulnerability management, and vendor