Director of Information Security, League
CA$210.1-262k
+ Employee Stock Option Program + Bonus Program
Consumer experience platform for healthcare
Open for applications
Consumer experience platform for healthcare
201-500 employees
Open for applications
CA$210.1-262k
+ Employee Stock Option Program + Bonus Program
201-500 employees
Company mission
To power next-generation healthcare experiences with a platform built to enable CX transformation.
Role
Who you are
- Bachelor's degree in Computer Science, Information Security, or a related field. A Master's degree is a plus
- Minimum of 10 years of experience in information security, with at least 5 years in a leadership or management role
- Demonstrated experience in leading, managing, and delivering Security Operations (e.g., SIEM, incident response, threat intelligence) and Product/Application Security (e.g., secure SDLC, SAST/DAST, DevSecOps), Enterprise Security, and Identity Management functions
- Proven experience in developing and implementing security strategies, policies, and programs
- Strong understanding of common security frameworks and standards (e.g., HITRUST, NIST CSF, ISO 27001, SOC 2, PCI DSS)
- Relevant professional certifications are highly desirable (e.g., CISSP, CISM, CRISC, GIAC certifications)
- Experience working in a dynamic, fast-growing technology company is preferred
- Deep understanding of cloud security principles and practices (e.g., AWS, Azure, GCP)
- Experience in influencing cross-functional teams and driving change in a collaborative manner
What the job involves
- The Director of Security is a senior leadership role responsible for establishing and maintaining a comprehensive information security program for League
- This includes direct oversight of Security Operations (SecOps) and Product/Application Security teams
- The successful candidate will be a strategic thinker with a strong technical background, capable of influencing without direct authority and working collaboratively across all departments to implement security measures that are proportionate to League's evolving needs and risk landscape
- This role is pivotal in protecting League's assets, data, and reputation while enabling business objectives
- Build relationships with stakeholders in customer, engineering, and company organizations to influence decision making and manage expectations and escalations
- Collaborate closely with product leaders to influence product strategy, roadmap, and process
- Work with your teams to set clear and measurable objectives, and drive them to completion
- Build a high performing team through the ongoing development of current team members and leaders
- Develop and lead inclusive, welcoming, and effective recruiting processes
- Maintain relationships with senior leaders and colleagues throughout the company and our external partners, and represent engineering in cross-functional projects and to the company and partners
- Proactively identify areas of improvement where engineering teams can make a difference and work with other teams to make those improvements happen
- Develop, implement, and maintain a strategic, comprehensive enterprise information security and risk management program to ensure the integrity, confidentiality, and availability of information
- Lead and mentor the Security teams across operations and product security, ensuring effective incident detection, response, and recovery capabilities, including managing security monitoring tools and processes
- Oversee the Product/Application Security program, embedding security best practices into the software development lifecycle (SDLC) from design to deployment, including code reviews, vulnerability assessments, and penetration testing
- Collaborate with engineering, product, legal, IT, and other business units to ensure security is integrated into their processes and initiatives
- Champion a culture of security awareness and responsibility throughout the organization
- Develop and implement security policies, standards, and procedures that are practical, effective, and proportionate to League's business objectives and risk tolerance
- Conduct regular risk assessments and security audits to identify vulnerabilities and ensure compliance with relevant regulations and standards
- Manage security budgets and vendor relationships
- Stay current with the latest security threats, technologies, and industry best practices
- Provide regular reporting on the current status of the information security program to executive leadership and relevant stakeholders
- Effectively influence stakeholders at all levels of the organization to adopt and support security initiatives, even without direct reporting lines
- Foster a collaborative environment to achieve shared security objectives across the company
Application process
- Applying to a role you love can be exhausting, and understanding the next steps can feel vague and uncertain
- You have done the hard part of submitting your application; let's do ours by sharing potential next steps
- You should receive a confirmation email after submitting your application
- A recruiter (not a computer) reviews all applications at League
- If we see alignment with League's needs, a recruiter will reach out to learn more about your goals. The recruiter will also share the team-specific interview process depending on the roles you are exploring
- The final step is an offer, which we hope you will accept!
- Prior to joining us, we conduct reference and background checks. Additional checks could be required for US Candidates, depending on the role you are exploring
Our take
Health benefits are a top requirement for anyone seeking a new job in the US today, but classic one-size-fits-all plans are no longer regarded fit for service. League's platform - for payers, providers, consumer health businesses, and employees - connects all benefits in one HIPAA-compliant place, to enable all bodies involved with health benefits to provide better customer healthcare experiences.
League is already one of the bigger players in the employee wellness space, having capitalized on the recently accepted correlation between employee health and productivity to secure huge clients like Uber, Shopify and Unilever. The company has seen significant investment which will support the scaling of its platform-as-a-service offering, to position it as the leading digital infrastructure for an integrated health ecosystem.
Freddie
Company Specialist at Welcome to the Jungle
Insights
-4% employee growth in 12 months
Company
Funding (last 2 of 4 rounds)
Feb 2022
$95m
SERIES C
Jul 2018
$47.1m
SERIES B
Total funding: $171.1m
Company benefits
- Flexible medical and dental plans
- 401(k) and RRSP matching programs
- Health, lifestyle, learning and family spending accounts
- Employee stock option program (ESOP)
- Generous leaves (including parental and sabbatical)
- Flexible time off
Company HQ
Entertainment District, Toronto, ON
Leadership
Michael Serbinis
(CEO & Founder)Founder of DocSpace and Kobo. Experience as CEO for Three Angels Capital and Board Director for Vector Insitute, among other prominent business leadership roles.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 16 more jobs at League