Senior Engineering Manager, Oscar Health

• 6+ years experience in Technology related field
• 5+ years experience in Cloud/Platform Security
• Familiarity with industry standards and compliance frameworks (such as SOC, SOX., NIST,, HIPAA) and experience in ensuring organizational adherence to these standards

Desirable

• In this role, you will be responsible for leading the team of Platform Security Engineers responsible for our cloud security efforts
• Oscar’s Platform Security team is focused on building security infrastructure and paved roads to enable Oscar’s cloud engineers to build faster and safer, while keeping Oscar’s infrastructure secure
• You will collaborate extensively with diverse teams, offering strategic insights, engineering efforts, and counsel to ensure the alignment of Oscar's security objectives with overarching business goals
• You will be involved in shaping and driving Oscar's security strategies through proactive measures and continuous improvement and demonstrated curiosity on continuously evolving our approaches
• You will report into the Chief Information Security Officer
• Responsible for driving medium-to-long term innovation and strategy for cloud security at Oscar, and developing actionable approaches to implementation
• Lead collaboration across cloud engineering functions to drive effective and secure outcomes that allow engineering teams to move faster while improving security
• Develop solutions that secure the business while also meeting compliance obligations
• Collaborate closely with cross-functional teams to proactively identify, address, and resolve security concerns across Oscar, including proposing enhanced controls and procedural strategies to mitigate technical risks
• Lead internal workshops with cross functional teams to discuss outcomes from technical reviews and develop a plan for mitigating identified risks
• Exhibit a deep understanding of Oscar’s technology footprint, how our systems work and how they may be attacked or abused
• Collaborate effectively with Security Leadership, providing insights into technical issues and their potential impacts
• Engage in multiple-layers of Oscar’s Technology stack to design security measures around protecting Oscar’s systems
• Simplify intricate security concerns into actionable steps for effective remediation or risk mitigation
• Define hardening and secure design standards and use them to perform architecture security reviews in partnership with developer teams
• Compliance with all applicable laws and regulations
• Other duties as assigned