Director, Corporate Security

The Opportunity at Komodo Health

Komodo Health needs a Director of Corporate Security who can assess the current state of our internal security environment and help drive strategic improvements across the company. This role will focus on protecting employee systems, identity, devices, endpoints, internal networks, business applications, vendor tools, and workforce-related security risk.

• Work closely with IT, Product Security, Engineering, Compliance, Legal, and business leaders to identify gaps, improve execution, and put more consistent operating practices in place.
• Report directly to the CFO, and carry executive visibility from day one.
• Operate at all levels — setting strategy, building the program, and getting into the details when it matters.

What You Bring To Komodo Health

• 7+ years of experience operating at the Director level or equivalent in corporate security, IT security, or security operations — with demonstrated accountability for program ownership, team leadership, and executive stakeholder management.
• Experience across both mature, compliance-minded environments (public company, regulated industry, or enterprise scale) and high-growth startups where you had to build from scratch.
• 5+ years of experience leading, managing, or developing high-performing teams.
• Proven track record building or significantly maturing a corporate security program at a startup or scale-up, where you owned the roadmap, made prioritization calls with limited resources, and shipped durable results.
• Deep fluency in corporate security fundamentals: identity and access management, endpoint security, device trust, internal network security, SaaS security posture, incident response, and access governance.
• Hands-on experience with enterprise security tooling — SIEM tools, modern EDR/MDR, modern email security, IAM platforms, and device management.
• Experience running a security program in an environment subject to external audits, SOC 2, or similar compliance frameworks. Comfort with auditor-ready documentation, evidence collection, and control testing.
• Strong cross-functional leadership. You have worked effectively across IT, Engineering, Compliance, Legal, Procurement, People, and business teams — and you know how to get things done through influence, not just authority.
• A clear, confident communicator at the executive level. You can translate technical risk into business language and present a credible security posture to CFOs, boards, and enterprise customers.
• Experience in healthcare, life sciences, or other sensitive-data environments handling PHI, PII, or proprietary clinical/commercial data.
• Experience communicating risks, gaps, progress, and recommended actions clearly to leaders and stakeholders with different technical backgrounds.
• Experience supporting audits, internal investigations, vendor reviews, security questionnaires, and environments that handle sensitive data.
• Strong judgment, leadership presence, and execution discipline, with the ability to stay calm under pressure and move work forward consistently.

Additional Skills and Experience We'd Prioritize

• Experience scaling a security program through a Series C–E or pre-IPO stage, with direct exposure to investor diligence, SOC 2 Type II, or early public-company readiness.
• Familiarity with Apple device management and mixed-device enterprise environments.
• Experience with security automation and tooling that improves team efficiency, detection quality, and response times.
• Background in offboarding and access governance at distributed organizations with significant SaaS sprawl.
• Experience evaluating, selecting, and managing enterprise security vendors through procurement cycles.