The Director, Information Security is a senior leadership position responsible for leading and overseeing Panoramic Health’s information security function. This role is critical in safeguarding the confidentiality, integrity, and availability of our organization’s information assets and technology products. The director develops and implements comprehensive strategies, policies, and procedures to identify and mitigate risks, ensure compliance with industry regulations, and responds effectively to security incidents. ResponsibilitiesDevelop and implement the organization’s information security strategy, aligning it with business objectives and risk tolerance.Identify and prioritize security initiatives, establish security goals, and create a roadmap for their implementation.Conduct regular risk assessments to identify and evaluate potential security threats and vulnerabilities.Develop and implement risk mitigation strategies, including security controls, policies, and procedures.Monitor and manage security risks through ongoing assessments and the implementation of appropriate safeguards.Develop and maintain a culture of security awareness through formal and informal security awareness training.Establish and enforce information security policies, standards, guidelines, and procedures.Ensure compliance with relevant laws, regulations, and industry best practices.Lead incident response efforts in the event of security breaches or incidents.Coordinate with relevant teams to investigate, contain, and remediate security issues promptly.Establish governance frameworks for information security.Ensure compliance with legal and regulatory requirements (e.g., HIPAA, PCI, HITRUST)Work closely with stakeholders across the organization to promote a culture of security.Align information security practices with business objectives and collaborate with executive leadership.Develop your team to assure high quality support for all stakeholders.Manage the technical safeguards and assure that they are performing as required.Review emerging technologies for fit and update the information security roadmap accordingly.Build and maintain relationships with external partners, such as security vendors, service providers, auditors and industry peers.Stay informed about emerging threats, best practices, and regulatory changes.Provide guidance and direction on security matters to executive leadership and board members.Advocate for the necessary resources and support to maintain a strong security posture. Qualifications:Bachelor's degree strongly preferred in Information Technology or equivalent work experience.An advanced degree in Information Systems, Business, Planning, or a related field is a plus.5 years leadership experience of building and leading Information Security teams and programs in mid to large healthcare delivery systemsProven experience in managing healthcare GRC programs, including HITRUST policy & technical control management and security risk assessmentProven experience in information security leadership roles.Industry certifications (e.g., CISSP, CISM, CRISC) are highly desirable.Strong knowledge of HIPAA, HITRUST, CIS and NIST security frameworks, risk management, and compliance.Excellent communication and leadership skills.