Senior Director, Information Security & Compliance (Remote)

Cognito Therapeutics; EE. UU.; A distancia; USD 180.000 - 240.000; Jornada completa

Descripción de la vacante

Cognito Therapeutics is building a Security, Privacy, and IT organization from the ground up under the SVP of Security, Privacy, and IT. The Information Security Director will lead the function day-to-day, hire and manage the team, and drive SOC 2 and HIPAA audit readiness with an eye toward HITRUST in the future.

Responsibilities include standing up and leading the information security program, developing policy, managing vendor risk, supporting client and partner security diligence, and

Formación

• 10+ years in information security, including experience leading a team or sub-function at the Director level.
• Direct experience running SOC 2 and/or HIPAA audits and preparing an organization for certification.
• Comfort operating as the day-to-day technical lead in client/partner diligence conversations.
• Experience building and managing a team from a small base.
• Experience developing and maintaining a security policy framework.
• Familiarity with a recognized security control framework (e.g., NIST CSF, ISO 27001, or similar).

Responsabilidades

• Build & Lead the Information Security Function: stand up and run Information Security day-to-day; hire and manage a team.
• Certification & Audit Readiness: drive SOC 2 and HIPAA audit prep and execution end-to-end; progress toward HITRUST.
• Policy, Risk & Vendor Management: establish security policy set and vendor review processes.
• Client & Partner Security Support: serve as day-to-day security contact in diligence conversations.
• Interim Leadership & Team Growth: provide interim reporting home for Privacy Analyst; hire and ramp security team.
• Reporting & Program Execution: define security KPIs; execute roadmap and surface risks.

Conocimientos

Security leadership

SOC 2 audits

HIPAA audits

Policy framework

Vendor risk management

Client diligence

Regulatory familiarity

Security metrics

Security training

Educación

Bachelor’s degree in Cybersecurity

Bachelor’s degree in related field

Herramientas

NIST CSF familiarity

ISO 27001 familiarity

Descripción del empleo

Cognito Therapeutics is building a Security, Privacy, and IT organization from the ground up under the SVP of Security, Privacy, and IT. The Information Security Director will lead the function day-to-day, hire and manage the team, and drive SOC 2 and HIPAA audit readiness with an eye toward HITRUST in the future.

Responsibilities include standing up and leading the information security program, developing policy, managing vendor risk, supporting client and partner security diligence, and