Cyber Security Lead

Job Description: Security Lead Role Summary We are seeking an experienced and multi-skilled Security Architect to design, document, and govern our enterprise and cloud security infrastructure. This role serves as a critical bridge between customer requirements, technical engineering teams, and compliance bodies. The position initially targets the "architect" mindset focused on organizing and documenting security controls. However, the scope offers a unique opportunity to lead Governance—helping to define processes, long-term hygiene, and security protocols for our upcoming deployment of automated platforms. Key Responsibilities 1. Security Architecture & Documentation ● Design and document end-to-end cloud security frameworks for our environment. ● Document existing controls and packages to put the organization on a clear path toward SOC 2 and HITRUST compliance. ● Map out security requirements across all existing and upcoming system interfaces. 2. Vulnerability, Code Engineering & Risk Management ● Establish policies for regular code scanning and automated code review workflows using third-party tools. ● Prioritize and coordinate remediation plans alongside core development teams. ● Oversee security preparation for critical next-phase applications, specifically around physician-patient interaction portals. 3. Governance & Strategy ● Establish early-stage governance, security processes, and compliance tracking specifically tailored to Artificial Intelligence. ● Define long-term maintenance, security guidelines, and architecture health policies for deploying multiple automated agent groups. ● Evaluate technical tradeoffs between native cloud tools and agnostic platforms to ensure data portability and architectural durability. 4. Audit & Stakeholder Engagement ● Act as the primary technical interface for internal and external regulatory security audits. ● Translate high-level architectural requirements into actionable security user stories, tasks, and implementation roadmaps for engineering. Required Qualifications Experience: 10+ years of foundational experience across cybersecurity, security engineering, or security architecture domains. ● Domain Expertise: Proven understanding of cloud-focused API security, identity access management, network security, and data protection. ● Tools & Operations: Strong experience with vulnerability scanning platforms, code verification tools, and tracking development remediation. ● Communication: Exceptional written communication skills with explicit experience converting complex cloud landscapes into clean compliance documentation. Preferred Qualifications ● Healthcare Industry Context: Strong domain experience in Healthcare Technology, HIPAA requirements, or patient/provider data security environments is highly desired. ● Compliance Frameworks: Active experience preparing technical architectures for SOC 2 and HITRUST audit frameworks. ● Cloud Architecture: Deep familiarity with cloud ecosystems (specifically Google Cloud Platform / GCP), cloud-native security mechanics, and API integration models. ● Advanced Certifications: Professional security accreditations (e.g., CISSP, CCSP, or cloud-specific security certifications). Success Metrics ● Audit Readiness: Timely and comprehensive compilation of control documentation, resulting in clear paths to SOC 2 and HITRUST validation. ● Risk Mitigation: Proactive minimization of security flaws across interfaces through clear architecture reviews and scanning gates. ● Technical Enablement: Provision of complete, highly actionable technical work packages and user stories to development teams. ● AI Infrastructure Foundation: Successful delivery of governance policies for agent workflows prior to heavy platform deployment.