Head of InfoSec

This is a fully remote position, open to applicants in United States, +1 more country.

📋 Description

• Take ownership of the cybersecurity strategy, roadmap, and operational model across all Aios entities and regions.

• Develop the systems and processes necessary to detect, investigate, contain, and recover from security incidents.

• Ensure that the appropriate personnel have the correct access to the necessary systems.

• Collaborate closely with engineering teams to enhance the security of our applications, APIs, cloud infrastructure, development processes, and sensitive data.

• Convert healthcare, privacy, and security requirements into actionable controls throughout the organization.

• Guarantee that Aios can maintain operations during system failures, security incidents, and other disruptions.

• Evaluate and manage risks arising from vendors, partners, contractors, acquisitions, and new market entries.

• Make security a clear and actionable responsibility across Aios.

⛳️ Requirements

• Minimum of 5 years of experience in leading cybersecurity, information security, or security engineering within a complex, rapidly growing organization, with proven ownership of outcomes.

• Ability to operate credibly across identity and access management, endpoint security, cloud infrastructure, application security, incident response, vulnerability management, and corporate systems.

• Experience in building or significantly enhancing a security program, including its roadmap, controls, policies, tooling, processes, and operational model.

• Comfortable operating in a developing environment, identifying necessary actions, and driving tasks to completion with minimal structure.

• Skilled in identifying critical risks, articulating them clearly, and implementing appropriate controls without causing unnecessary friction or slowing business operations.

• Experienced in managing security incidents or high-severity technical issues, leading calmly through investigation, containment, communication, recovery, and remediation.

• Capable of working effectively with engineering, operations, legal, compliance, human resources, clinical, and executive teams, even without direct management over those responsible for implementation.

• Previous experience in environments dealing with highly sensitive customer, patient, financial, employee, or similarly regulated data.

🏝️ Benefits

• Comprehensive medical insurance (if applicable).

• Paid Time Off (PTO) with a yearly minimum (≥2 weeks/year + local national holidays).

• Our team operates fully remotely, distributed across the globe.

• Budget for books, courses, and coaching ($1,200/year).

• Budget for gym memberships and health apps ($1,200/year).

• Free biweekly health coaching.

• MacBook and work-from-home equipment provided as needed.

• As we are still in the early stages, you will have the opportunity to shape our culture.