Director of Information Security

Charlie Health • New York, NY

18h • $200,000 - $250,000 • Hybrid

About The Position

The Director of Information Security leads the execution and continued maturity of Charlie Health’s information security program. Reporting to the VP of IT & CISO, this role leads the Information Security team, translates security strategy into measurable outcomes, and ensures security capabilities scale with the business. The Director provides broad leadership across security engineering, security operations, governance, risk, compliance, identity, cloud security, application security, and data protection. The role partners with IT, Engineering, Compliance, Legal, Privacy, Product, and business leadership to reduce risk while enabling the organization to move quickly and safely. In Charlie Health’s regulated healthcare environment, the Director helps align security capabilities with HIPAA, SOC 2, NIST, Zero Trust principles, and other applicable regulatory and contractual requirements.

The position requires working in-office four days per week and living within a 75-minute commute of Charlie Health’s NYC office near Union Square.

Requirements

• 10 or more years of progressive experience in information security, security engineering, security operations, or related disciplines.
• At least 3 years of experience leading security teams or major security programs.
• Demonstrated experience building, scaling, or materially improving an enterprise information security program.
• Broad technical experience across multiple security domains, including identity, endpoint, SaaS, cloud, application security, security operations, and data protection.
• Strong understanding of security architecture, control design, incident response, and risk management.
• Experience operating in a regulated environment and translating regulatory requirements into practical controls.
• Strong understanding of Zero Trust, least privilege, identity-centric security, and secure-by-design principles.
• Strong leadership, communication, judgment, and cross-functional collaboration skills.
• Ability to operate effectively in a high-growth environment with significant change and competing priorities.
• Live within a 75-minute commute of the NYC office near Union Square and be able to work in-office four days per week.

Nice To Haves

• Experience in healthcare, financial services, or another highly regulated industry.
• Experience supporting HIPAA, SOC 2, NIST, ISO 27001, or similar frameworks.
• Experience leading multidisciplinary security teams.
• Experience with enterprise identity, endpoint, cloud, SIEM, MDR, DLP, and application security platforms.
• Experience securing enterprise AI tools, LLM platforms, or AI-enabled workflows.
• Relevant certifications such as CISSP, CISM, CCSP, or equivalent experience.

Responsibilities

• Translate CISO and executive strategy into clear priorities, roadmaps, and measurable security outcomes.
• Lead and develop the Information Security team, including hiring, coaching, performance management, and organizational planning.
• Establish security metrics, operating rhythms, and reporting that provide visibility into risk, control maturity, and program performance.
• Provide leadership across security engineering, architecture, security operations, incident response, identity, cloud, application security, and data protection.
• Partner with IT and Engineering to embed secure-by-design practices, automation, and modern engineering practices that improve control effectiveness, consistency, and operational efficiency.
• Lead security incident readiness and response, coordinating with internal teams, managed security providers, and external partners.
• Lead operational security capabilities supporting HIPAA, SOC 2, NIST, and other applicable requirements.
• Identify, assess, and prioritize security risk based on business impact, materiality, and organizational priorities.
• Partner with leaders across Compliance, Legal, Privacy, Product, IT, and Engineering to integrate security into business and technology decisions.

Benefits

• Comprehensive benefits for full-time, exempt employees.
• Performance bonus.
• The compensation package may include stock options and other Charlie Health-sponsored benefits.

What This Job Offers

• Job Type: Full-time
• Career Level: Director
• Education Level: No Education Listed