What are the responsibilities and job description for the Vice President of Engineering, Chief Information Security Officer (CISO) position at Collective Health?
At Collective Health, we’re transforming how employers and their people engage with their health benefits by seamlessly integrating cutting-edge technology, compassionate service, and world-class user experience design.
We all depend on healthcare throughout our lifetimes, for ourselves, and our families and friends, but it is notoriously difficult to navigate and understand. As an industry that comprises 20% of the US economy we think healthcare should work better for all of us. At Collective Health we believe it’s time for a new day in healthcare where as members we are informed and empowered to make the right care choices when the decisions are urgent and critical.
The CISO and Vice President of Engineering will be responsible for overseeing the strategic direction, development, and operation of the company's Cyber Security, Cloud infrastructure & SRE, and IT practices. The CISO will lead the information security team, collaborate continuously with the company’s Privacy, Risk, and Compliance Team, and help business leaders—and our board—ensure that security resources and practices align to business needs, priorities, and requirements. This role requires a visionary leader who can drive innovation, optimize processes, and ensure the security and reliability of our systems.
What you will do :
- Leadership and Strategy :
- Develop and implement a comprehensive security and IT / cloud infrastructure strategy that supports the company’s overall business objectives.
- Lead, mentor, and manage a high-performing team of security SRE, and IT professionals.
- Foster a culture of innovation, continuous improvement, and collaboration within the department.
- Work with senior leadership to align security and IT initiatives with business goals.
- Cyber Security :
- Establish and maintain an enterprise-wide information security management program with clear information security policies and procedures.
- In partnership with Chief Privacy and Compliance officer, update and guide senior leadership and the Board of Directors on current cyber threats, issues, and risks, and provide regular status updates on progress and status of initiatives and operations.
- Oversee the information security organization with an emphasis on the effectiveness of security controls
- Manage security incidents and events to include containment, communication and coordination across all relevant business functions
- Establish and maintain disaster recovery and business continuity plans
- Cloud infrastructure and SRE Management :
- Oversee the development and implementation of DevSecOps practices to improve software delivery and operational efficiency.
- Promote a culture of automation, continuous integration, and continuous deployment (CI / CD).
- Ensure high reliability and uptime for the cloud applications
- IT Infrastructure and Operations :
- Oversee the management and maintenance of IT infrastructure, including networks, servers, databases, and cloud environments.
- Ensure the security, scalability, and reliability of IT systems.
- Implement and maintain disaster recovery and business continuity plans.
- Budgeting and Resource Management :
- Develop and manage the departmental budget, ensuring cost-effective use of resources.
- Allocate resources to various projects and initiatives based on strategic priorities.
- Stakeholder Engagement :
- Collaborate with other departments to understand their IT needs and provide solutions that support their goals.
- Communicate IT strategy, progress, and performance to executive leadership and stakeholders.
To be successful in this role, you'll need :
Pay Transparency Statement
This is a hybrid position based out of our San Francisco office, with the expectation of being in office at least two weekdays per week. # LI -hybrid
The actual pay rate offered within the range will depend on factors including geographic location, qualifications, experience, and internal equity. In addition to the salary, you will be eligible for stock options and benefits like health insurance, 401k, and paid time off.
