Engineering Manager, Notable

• 10+ years in information security roles, including at least 4+ years in leadership or cross-functional program ownership
• Strong technical background in security engineering, infrastructure security, or secure software development
• Experience maintaining certifications such as SOC 2, HIPAA, HITRUST, or ISO 27001 in production environments
• Skilled in secure SDLC practices, cloud security (GCP preferred), threat modeling, and risk assessment
• Familiarity with corporate and IT security controls: SaaS platforms, identity management, endpoint security
• Strong communicator with experience influencing engineering and non-technical stakeholders
• Able to think strategically and execute pragmatically in a fast-paced, high-trust environment

Desirable

• We’re looking for an Engineering Manager, Information Security to lead and scale Notable’s security program across product, infrastructure, corporate systems, and compliance
• While the title reflects our internal leveling, this is a Head of Security–level role with end-to-end responsibility for security and risk across the organization
• You’ll start with a team of three: two security analysts supporting compliance and operations, and one security engineer focused on building tooling and enabling secure development
• Together, you’ll own both the tactical and strategic functions of a modern security program
• Notable has already achieved HIPAA, HITRUST, and SOC 2 certifications and is currently undergoing ISO 27001 certification, expected by year end
• You’ll be responsible for maintaining these programs and evolving our internal and product-facing security to meet the expectations of enterprise healthcare customers
• Lead the security team across product security, corporate security, and compliance operations
• Maintain and enhance existing certifications (HIPAA, HITRUST, SOC 2) and support ongoing ISO 27001 efforts
• Guide product and application security, including threat modeling, architecture reviews, and developer enablement
• Enhance and own AI governance and customer data compliance controls
• Partner with engineering to improve internal security tooling, IAM, CI/CD security, and vulnerability management
• Own incident response, disaster recovery, and detection programs across infrastructure and corporate environments
• Oversee corporate security: SaaS app security, endpoint management, SSO/MDM, and internal access controls
• Collaborate with legal and compliance to manage vendor risk, third-party audits, and customer security reviews
• Lead internal training and security awareness programs for engineers and employees
• Track evolving customer requirements, threat landscapes, and regulatory obligations to continuously improve posture