Director, Information Security Programs

ModMed is hiring a driven Director of Information Security Programs who will be a  senior leader within the information security team, reporting directly to the Chief Information Security Officer (CISO). This role serves as a critical partner to the CISO, driving security program management, governance, risk, and compliance (GRC) activities, and ensuring the successful execution of strategic cybersecurity priorities. The Director will lead cross-functional efforts to mature the organization’s security posture, manage complex security projects, and operationalize governance frameworks to align with regulatory and organizational requirements within a fast-paced Healthcare IT company that is truly Modernizing Medicine!

Your Role:

• Drive the execution of the organization’s cybersecurity strategy by managing security programs/projects, tracking key initiatives, and ensuring timely delivery milestones.
• Develop and maintain a cybersecurity program roadmap that aligns with business objectives and regulatory requirements. 
• Collaborate with cross-functional teams to manage resource allocation, resolve roadblocks, and ensure alignment of security initiatives.
• Oversee the development and execution of security governance frameworks, policies, and standards.
• Mentor and collaborate with the existing Cyber GRC team at ModMed. 
• Ensure compliance with regulatory requirements (E.g., HIPAA, SOC 2, PCI, etc.)
• Act as a trusted advisor and right hand to the CISO, assisting with executive reporting, board presentations, and key decision-making processes. 
• Provide thought leadership and recommendations to enhance the overall security strategy and operational efficiency. 
• Represent the CISO in cross-functional meetings and engagements as needed.
• Mentor and coach team members to build expertise and leadership within the security organization.
• Partner with security managers to ensure programs are effectively integrated into day-to-day operations.
• Foster a culture of collaboration, innovation, and accountability across the security team.
• Define, track, and report key performance indicators (KPIs) and metrics to measure the effectiveness of security programs and initiatives.
• Develop executive-level dashboards and reports to communicate program status, risk posture, and operational performance to leadership and the board.

Skills & Requirements:

• Bachelor’s degree or equivalent education and experience
• Minimum of 10+ years of experience in information security or related fields. 
• Strong knowledge of security frameworks and regulatory requirements.
• Proven ability to manage complex projects and security programs. 
• Strategic thinker with strong analytical and problem-solving skills.
• Exceptional communication and presentation skills, with the ability to engage and influence executives and stakeholders.
• Strong organizational and project management skills with a focus on delivering results.

## LI-LA1