VP, Information Security & Risk Management

Job Responsibilities

• Develop and operationalize the organization’s information security strategy, ensuring alignment with business priorities
• Translate strategic objectives into measurable programs, initiatives, and controls across the enterprise
• Establish performance metrics (KPIs/KRIs) to evaluate security posture and program effectiveness
• Oversee the enterprise information security compliance program, including HIPAA Security Rule alignment and internal compliance requirements
• Direct security governance frameworks, policies, and standards
• Ensure consistent implementation and monitoring of controls across the organization
• Provide oversight of audit readiness, regulatory responses, and remediation strategies
• Oversee enterprise incident response governance, ensuring consistent processes for escalation, communication, and mitigation
• Cook up executive-level communications during security incidents
• Ensure alignment between operational response teams and executive decision-making
• Lead major client, partner, and vendor security engagements, including security reviews and contractual security discussions
• Drive accountability for operational performance and program delivery
• Lead major client, partner, and vendor security engagements, including security reviews and contractual security discussions
• Serve as a key representative for security posture in customer and partner interactions
• Collaborate with Legal, Compliance, and IT to ensure alignment on risk acceptance and mitigation strategies
• Establish organizational structure, priorities, and resource planning for the security function
• Promote a culture of accountability, risk awareness, and continuous improvement