Senior Director, InfoSec - SOC 2 & HIPAA (Remote)

Cognito Therapeutics, Inc.; United States; Remote; USD 160,000 - 230,000; Full time

Benefits offered by this job

Unlimited PTO

Wellness perks

Virtual medical support

Health, dental, and vision insurance

Job summary

Cognito Therapeutics, Inc. is seeking an experienced Information Security Director to build and lead a Security, Privacy, and IT organization from the ground up.

You will drive SOC 2 and HIPAA audit readiness, coordinate with the SVP, and guide policy, risk, and vendor management as the company scales through 2028. You will interact with clients, partners, and the leadership team to define KPIs, report risks, and oversee a security roadmap and budget.

Qualifications

• 10+ years in information security, including leadership at Director level.
• Direct experience running SOC 2 and/or HIPAA audits.
• Comfort as day-to-day technical lead in client/partner discussions.
• Experience building and growing a security team from a small base.
• Experience developing and maintaining a security policy framework.
• Familiarity with NIST CSF, ISO 27001, or similar security controls.

Responsibilities

• Stand up and run Information Security day-to-day and hire the team.
• Drive SOC 2 and HIPAA audit readiness end-to-end, including scoping and evidence collection.
• Build toward HITRUST certification and report progress to SVP.
• Develop and maintain the information security policy set for the organization.
• Establish a vendor security review process for new tools and vendors.
• Serve as security contact in partner and client diligence conversations.
• Hire and ramp the Security team and provide interim leadership as needed.
• Define security KPIs and report to SVP and leadership/board.
• Execute the security roadmap and manage budget with the SVP.

Skills

Information security leadership

SOC 2 audits

HIPAA audits

Vendor risk management

Policy development

Education

Bachelor's degree in Cybersecurity or related field

Job description

Cognito Therapeutics, Inc. is seeking an experienced Information Security Director to build and lead a Security, Privacy, and IT organization from the ground up.

You will drive SOC 2 and HIPAA audit readiness, coordinate with the SVP, and guide policy, risk, and vendor management as the company scales through 2028. You will interact with clients, partners, and the leadership team to define KPIs, report risks, and oversee a security roadmap and budget.