Director, Security, Privacy & Compliance
Share
Job Location:
Chicago, IL - USA
Monthly Salary:
$ 130000 - 150000
Posted on:
30+ days ago
Vacancies:
1 Vacancy
Job Summary
About Us
At Kalderos we are building unifying technologies that bring transparency trust and equity to the entire healthcare community with a focus on pharmaceutical pricing. Our success is measured when we can empower all of healthcare to focus more on improving the health of people.
That success is driven by Kalderos greatest asset our people. Our team thrives on the problems that we solve is driven to innovate and thrives on the feedback of their peers. Our team is passionate about what they do and we are looking for people to join our company and our mission.
What Youll Do:
- Own privacy and information security risk management functions
- Provide oversight and monitor key elements of Kalderos vendor management program
- Oversee activities related to risk management due diligence contract provisions vendor reviews and ongoing monitoring requirements
- Assure adherence to applicable federal and state regulations
- Support security and privacy compliance (SOC 1 & 2 HIPAA HITRUST CCPA etc.)
- Develop and conduct periodic risk assessments
- Liaise with the Kalderos leadership team and cross-functional partners to ensure effective coordination of privacy and security requirements and activities
What Youll Bring:
- Bachelors degree in a technical field or equivalent practical experience
- 8 years of experience in Information Security Governance Risk and Compliance
- Experience with Risk Management and Information Security strategy practices technologies and tools
- Experience conducting efficient and regular risk assessments and auditing and monitoring activities
- Experience with Information Security frameworks and standards such as NIST SOC 2 ISO 27001
- Experience in a healthcare company with knowledge of existing and emerging federal and state requirements related to privacy and security of health information is a plus
Set Yourself Apart:
- Have owned and managed SOC 2 and HIPAA/HITRUST compliance & certification programs.
- Knowledge of current Cloud security architecture software and database technologies
- Understanding of risk management from the technology perspective
- Strong professional and interpersonal skills
- Ability to maintain a high level of confidentiality
- Demonstrated ability to complete projects in a timely manner with little supervision or direction
- Demonstrated ability to set priorities and to respond to changing demands from multiple sources in a fast-paced environment
- Ability to follow through meet deadlines anticipate requirements and build relationships
- Strong analytical decision-making and problem-solving skills
- Excellent verbal and written communication skills
- Excellent time management and organizational skills
- Knowledge of personal computers and relevant applications
Recommended Certifications:
- CRISC Certified Risk and Information Security Control
- CISM - Certified Information Security Manager
- CISA - Certified Information Systems Auditor
- CHPC - Certified in Healthcare Privacy Compliance
Expected Salary Range:$130000-$150000 base bonus
This is a hybrid role based out of Chicago IL or Boston MA.
Highlighted Company Perks and Benefits
- Medical Dental and Vision benefits
- 401k with company match
- Flexible PTO with a 10 day minimum
- Opportunity for growth
- Mobile & Wifi Reimbursement
- Commuter Reimbursement
- Donation matching for charitable contributions
- Travel reimbursement for healthcare services not available near your home
- New employee home office setup reimbursement
What Its Like Working Here
- We thrive on collaboration because we believe that we can only put our best work into the world when we work together to solve problems.
- We empower each other and believe in ensuring all voices are heard.
- We know the importance of feedback in individual and organizational growth and development which is why weve embedded it into our practice and culture.
- Were curious and go deep. Our slack channels are filled throughout the day with insightful articles discussions around our industry healthcare and anything else that interests our team!
Kalderos is proud to be an equal opportunity workplace. We are committed to equal opportunity regardless of race color religion sex national origin sexual orientation age citizenship marital status disability or veteran status.
Privacy notice for California job applicants.
Kalderos participates in E-Verify.
Required Experience:
Director
Key Skills
- Crisis Management
- Splunk
- Google Cloud Platform
- Cybersecurity
- Identity & Access Management
- Management Experience
- PCI
- NIST Standards
- Emergency Management
- Security
- Information Security
- Encryption
About Company
Kalderos solves problems facing the U.S. healthcare system. We work with providers, manufacturers, and others to increase transparency through technology.
