Senior Manager of Security, Maven Clinic

• Bachelor's degree in Computer Science, Information Systems, or a related field
• Minimum of 8+ years of management experience in security (or related role)
• Strong understanding of security principles, practices, and frameworks, including experience at various levels of security including physical, network, application, data, cloud, and others
• Strong history as a leader with excellent communication and analytical skills
• Proficiency with security technologies such as SIEM, firewalls, IDS/IPS, encryption, and cloud security tools
• Risk Management: Strong knowledge of risk management frameworks, industry standard certifications (e.g., SOC 2, HITECH), regulatory requirements (e.g., GDPR, CCPA), and industry standards (e.g., ISO 27001, NIST)

Desirable

• We’re looking for an experienced Senior Manager, Security who will be able to help Maven develop and implement a comprehensive security program to make sure we protect our data, systems, and reputation. You will work closely with our security engineering team to ensure that we design our security infrastructure and compliance program in a way that meets regulatory requirements, maintains important certifications, and meets the expectations of our sophisticated clients.
• We need someone who is operations-minded, to help us identify ways to scale our program efficiently and continue to support a wide range of cross-functional business partners, from our engineering and product teams, to our growth teams, to our legal team. We also need someone who is comfortable on their feet, and can explain our approach to our clients and make sure they feel comfortable with our security infrastructure
• Develop, implement, and maintain a comprehensive security strategy across multiple areas of focus
• Conduct regular risk assessments to identify potential vulnerabilities, threats, and develop mitigation plans
• Lead and coordinate incident response efforts, ensuring timely and effective resolution
• Ensure adherence to security frameworks such as SOC 2, ensuring the organization meets industry standards for security
• Develop and deliver security awareness training programs to employees
• Security Architecture and Engineering: Collaborate with engineering and IT teams to design and implement secure systems and infrastructure
• Provide mentorship, set performance goals, and foster a culture of security awareness across the organization
• Ensure that third-party systems and services meet Maven’s security standards and do not introduce unnecessary risks
• Security Awareness and Training: Develop and deliver security awareness programs to educate employees about security best practices, social engineering threats, and the importance of data protection
• Promote a security-first culture throughout the organization
• Continuous Improvement: Continuously assess and improve the organization’s security posture by staying current with the latest cybersecurity trends, threats, and technologies
• Implement advanced security measures to anticipate and mitigate potential threats