Chief Information Security Officer (CISO)

BigRio • Boston, MA

4d • Hybrid

About The Position

The Chief Information Security Officer (CISO) role at BigRio is a strategic leadership position focused on architecting the security foundation for a rapidly evolving, hybrid ecosystem. This role goes beyond traditional security leadership by embedding security into the core of how the company builds, operates, and scales its digital transformation efforts. The CISO will elevate cybersecurity to a strategic business function, enabling growth, customer trust, and regulatory confidence. This position involves building and leading a high-impact team, shaping culture, capability, and long-term security maturity within an environment characterized by complex data platforms, legacy systems, and growing digital products. The primary mandate is to stabilize, modernize, and future-proof the organization's security posture.

Requirements

• Proven track record of collaborating across functions and influencing outcomes without relying on mandates, with a commitment to understanding all stakeholder perspectives and driving solutions that work in practice.
• Proven success as a CISO, VP, or senior security leader in complex, regulated environments.
• Experience building or transforming enterprise security programs at scale.
• Strong background in hybrid architectures (cloud + on-prem) and modern security practices.
• Deep expertise in Identity and access management.
• Deep expertise in Security architecture and engineering.
• Deep expertise in Threat detection and incident response.
• Deep expertise in Risk and governance frameworks (e.g., NIST, ISO 27001).
• Experience securing data platforms and large-scale data environments (e.g., Databricks, Snowflake, or similar ecosystems).
• Strategic and forward-thinking, with the ability to translate risk into business impact.
• Hands-on when needed—comfortable operating in both build and scale modes.
• Strong communicator and influencer at the executive and board level.
• Collaborative leader who can align diverse stakeholders across technical and non-technical domains.
• Comfortable operating in an environment with ambiguity, urgency, and high expectations.

Nice To Haves

• Familiarity with or exposure to Centers for Medicare & Medicaid Services Acceptable Risk Standards (CMS ARS) is a plus.

Responsibilities

• Define and execute a forward-looking cybersecurity strategy aligned to enterprise growth and digital transformation.
• Position security as a business enabler, particularly across data, AI, lab operations, and customer-facing platforms.
• Design and implement end-to-end security capabilities across governance, architecture, engineering, and operations.
• Introduce scalable frameworks for risk management, policy, and control standardization.
• Protect highly sensitive PHI, genomic, and research data across hybrid environments.
• Partner with Data and Engineering teams to embed security into modern data platforms and AI/ML workflows.
• Lead the evolution toward zero trust principles, strong identity and access management, and secure-by-design architectures.
• Address foundational gaps in logging, monitoring, access control, and environment consistency.
• Build or enhance threat detection, incident response, and vulnerability management capabilities.
• Establish robust disaster recovery and business continuity aligned to critical operations.
• Ensure alignment with key regulatory and compliance frameworks (e.g., HIPAA, CLIA, and broader healthcare standards).
• Lead audit readiness and strengthen external trust with customers and partners.
• Work closely with lab operations, genomic technology, engineering, compliance, and commercial teams.
• Drive shared accountability for security outcomes across the organization.

Benefits

• Mission-driven impact: Your work directly contributes to better patient outcomes and the future of precision medicine
• Executive visibility and influence: Direct partnership with CIO and senior leadership
• Transformational scope: Opportunity to build a modern security program in a high-growth, data-rich environment
• Complex, meaningful challenges: Secure one of the most sensitive and valuable data ecosystems in healthcare

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed