Director, Security & Compliance

POSITION SUMMARY

The Director, Security and Compliance is a critical part of the FitOn Health team that leads the company in achieving data security and compliance objectives. This person will implement and manage security controls, implement and maintain effective security policies and maintain a strong security posture across the organization. The Director, Security and Compliance will use their extensive industry experience to ensure the protection of both the company’s and its client’s data. This position will be responsible for leading strategic initiatives, interfacing with leaders across all departments of the organization.

KEY RESPONSIBILITIES

• Implement information security and change management strategies, collaborating with department leaders to ensure best practices
• Evaluate cybersecurity compliance, including audit initiatives, and escalated issues affecting overall company security
• Manage and strategically lead internal IT and Tech Operations team to maintain necessary compliance
• Responsible for working with external auditors to maintain SOC2 compliance
• Perform policy auditing and reporting, which includes updating policies, monitoring and updating procedures and updating policy documents for approval and submission
• Managing Corrective Action Plans (CAP) & client related security and compliance requests
• Reviewing and updating of Contractual Agreements
• Coordinate and perform third party vendor management assessments for new and existing vendors
• Identify opportunities to streamline processes pertaining to compliance activities through process improvement and automations
• Lead the risk management and incident response teams
• Other duties as assigned

KNOWLEDGE, SKILLS, AND OTHER QUALIFICATIONS

• Minimum of 5+ years of relevant experience in Information Security, Compliance, Risk Management, in a Technology company. 
• 3+ years of Healthcare Industry experience
• 3+ years of experience with internal/external audits, and internal controls with focus on HIPAA, HITRUST and SOC 2 audits.
• Security certifications like CISA, CISSP or Similar
• Experience with shared security model for Azure 
• Team Management experience
• Ability to collaborate with multiple departments and levels within the organization

EDUCATIONAL GUIDELINES:

Bachelor's degree in Computer Science or related field, or equivalent work experience

WHO WE NEED: (Intangibles) 

• Passionate about health and fitness
• Desires to have a role in the growth of a startup 
• Stays motivated and knows how to be persistent
• Is self-directed
• Can work remotely and make decisions autonomously at a high level
• Flexibility to handle changing responsibilities

WHAT YOU GET:

• The opportunity to help expand the impact of FitOn Health across the United States…and, someday, the world!
• The chance to work in a relaxed, yet goal-driven start-up culture with a passion for fitness and wellness
• FitOn Health credits to attend fitness classes & access to our world class FitOn Pro digital experience
• Chance to work remotely with flexible scheduling
• Health Insurance & other benefits

At FitOn Health, We are committed to fair, equitable, and competitive compensation. The salary for this position is $150,000-$200,000. During the interview process, total compensation will be determined in alignment with market data, and the experience & capabilities of each candidate.