Chief Information Security Officer, Included Health
$203.3-409.7k
Salary dependent on location + Performance-based bonus + Equity
Digital healthcare provider
Open for applications
Digital healthcare provider
1001+ employees
Open for applications
$203.3-409.7k
Salary dependent on location + Performance-based bonus + Equity
1001+ employees
Company mission
To raise the standard of healthcare for everyone, everywhere.
Role
Who you are
- Previous security leadership experience, ideally leading a Security function
- Excellent communication skills at an executive level and the ability to dive deeper and document and explain technical details clearly and concisely
- Previous experience leading Product Security, Governance Risk & Compliance, and Security Engineering
- Operating expertise in cloud-based service offerings such as AWS, GCP, and Azure
- Experience in building and scaling a well-rounded security program, including benching to SOC2 / HITRUST / HIPAA standards using NIST controls
- Thorough understanding of the current threat and attack landscape, latest security trends, and principles
- Security certifications such as CISSP, OSCP, or CISM are preferred
- Ability to work collaboratively and cross-functionally across the Enterprise required
- B.S. / B.A. degree or relevant work experience
- Prompt and regular attendance at assigned work location
- Ability to work shifts of at least 8 hours, 5 days per week
- Ability to thrive in a fast-paced, high-intensity work environment
- Ability to remain seated in a stationary position for prolonged periods
- Requires eye-hand coordination and manual dexterity sufficient to operate keyboard, computer and other office-related equipment
- No heavy lifting is expected, though occasional exertion of about 20 lbs. of force (e.g., lifting a computer / laptop) may be required
- Ability to interact with leadership, employees, and members in an appropriate manner
What the job involves
- The Chief Information Security Officer will be the leader of Information Security at Included Health
- This position's primary responsibility is safeguarding patient, employee, customer, and third-party vendor data
- You will be responsible for leading the team that designs, builds, implements, and maintains a world-class security program end to end
- You will also be the representation for information security with our customers, prospects, investors, and board members
- Security is a strategically important pillar of our business, critical for the sustained growth of our company
- This position is an exciting opportunity that requires strong technical competency, a proven managerial track record, and transformational leadership to continue the evolution of our enterprise security program for the future
- Bring your best self, sense of humor included - we work hard, but we like to play hard too
- Set the mission, vision, and strategy for the Information Security organization and execute to keep our members’ data safe
- Build trust, whether working cross-functionally with internal stakeholders (like Engineering or Legal) and collaborating externally with our customers, including CISOs and other Security professionals at Fortune 100 companies
- Collaborate in a consultative manner with clear focus on our company’s objectives delivering on our mission for our members and clients
- Provide thought leadership and guidance while ensuring teams are engaged and focused on short-term priorities while establishing the long-term strategy
- Evangelize information security internally and externally, both with employees and company leadership as well as investors, clients & prospects, as well as board-level committees
- Continuously expand on the information security roadmap with the respective leaders in the Infosec organization
- Execute leadership and oversight for the implementation and automation of security capabilities, systems, and services - drive and evangelize the different functions within Information Security to business units and critical stakeholders across the Enterprise, including but not limited to IDS/IPS, SIEM, Vulnerability Management, Architecture Review, SAST/DAST, WAF, Incident Response, and Third Party Risk Management
- Manage internal and external security/risk assessments, programs, penetration testing, bug bounty, vulnerability management, etc
- Set the strategy and provide oversight to maintain existing security certifications (SOC2 Type 2 and HITRUST), and keep an eye on the future (e.g., FedRAMP and PCI ROC)
- Collaborate with audit, compliance, and privacy departments to maintain and enhance shared capabilities within the business, product, and services that Included Health provides
- Manage capacity, budget, and resource allocation to meet growth initiatives and to ensure alignment with high-value projects to revenue generation, cost reduction, and business objectives
- Engage with Senior Leadership to create visibility into relevant Security topics, provide updates on the threat landscape, and discuss mitigation strategies
- Set the direction for creating and/or maintaining documentation of relevant standard operating policies and procedures and incorporating OKRs and KPIs to drive and measure the success of the Information Security program
Our take
As the name suggests, Included Health is on a mission to raise the standard of healthcare for everyone, offering inclusive, integrated virtual care and navigation.
It differentiates itself from competitors with its emphasis on improving health outcomes and challenges faced by communities including LGBTQ+ and BIPOC. The negative healthcare experiences faced by these marginalised groups means they often avoid care at a rate that is around 3x greater than the border US population, putting their health at risk.
With healthcare still fragmented and focused on one-size-fits-all solutions, Included Health is disrupting the market by using technology to match patients quickly with the best care, no matter where they live. It currently counts retail behemoths Walmart and Home Depot as customers.
Freddie
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 6 rounds)
Sep 2020
$175m
GROWTH EQUITY VC
May 2018
$66m
SERIES D
Total funding: $347m
Company benefits
- Comprehensive medical, dental and vision plans
- All employee spouses and children can access Included Health services at no cost
- For time off, take it when you need it with our unaccrued discretionary time off for all exempt employees
Company values
- We put the member first - Members are the center of our universe. We take the member’s call, hanging up on the boss if we need to. We work together to achieve health outcomes and member moments worth celebrating. We advocate for a healthcare system that works for everyone
- We're here for outcomes - We know that effort is not a substitute for impact. We reward problem solving, removing obstacles and getting it done with integrity. We take accountability for our outcomes, good or bad
- We seek diverse perspective - Diverse voices make a meeting. We walk away from the echo chamber. We create space for different points of view and bring data to inform our thinking. We speak with candor, debate with respect, listen to feedback and follow through with action
- We value change - We know change is our opportunity and adaptation is our super power. We move towards gray spaces, understanding that we may not get it right the first time. We manage ambiguity and are always ready to take on new challenges. We are lifelong learners
- We lead the way - We ask ourselves every day, “is there a better way?” We work together to spark innovation, break down barriers and make wise bets. We encourage unconventional thinking that inspires and works to solve complex problems
Company HQ
Financial District, San Francisco, CA
Articles
Leadership
Owen Tripp
(CEO & co-founder)Previously served as a Senior Consultant at Accenture before joining eBay as the Manager and Founder of User Behaviour Intelligence in 2004. Co-founded Reputation.com in 2006, and served as its COO from 2008 to 2012. Was an Advisor at Pathbrite and Life360.
Lawrence "Rusty" Hofmann
(Co-Founder)Studied Medicine at Ohio State, Johns Hopkins and Stanford. Was Assistant Professor at Johns Hopkins from 2000 to 2005, and is now Professor of Interventional Radiology at Stanford. Co-founded Grand Rounds, rebranded to Included Health, in 2012. Is Medical Director at Stanford Health Care.
Diversity, Equity & Inclusion at Included Health
- We’re committed to creating teams that reflect the diversity of our members and ensuring a welcoming and inclusive workplace for people of all backgrounds, beliefs and identities. We’re proud to support our employee resource groups for Women, People of Color, Parents, members of the LGBTQ+ community, and more
Share this job
View 22 more jobs at Included Health