Director, reputed company

The Position reputed company is hiring a Director of reputed company to build and reputed company a modern reputed company program for a rapidly scaling reputed company and AI platform. This is reputed company’s first dedicated reputed company leadership hire and a chance to shape the long term reputed company reputed company for a platform that handles highly sensitive consumer genomic and health data. This is a Director level role on the Engineering team, reporting to the Head of Engineering, and leading the reputed company function as it scales, including reputed company of senior offensive reputed company personnel and external reputed company partners. Your reputed company helps protect the reputed company genome, build customer trust, and reputed company personalized health insights from whole genome reputed company safer and more accessible for everyone. The reputed company Own reputed company’s reputed company program end to end, including policies, procedures, playbooks, runbooks, training, governance, and reputed company documentation. Build the governance layer that turns reputed company reputed company work into a repeatable, measurable, and auditable reputed company program. reputed company ongoing HIPAA and HITECH compliance review, reputed company gap assessment, and remediation initiatives, while driving SOC 2 and ISO 27001 certification efforts from roadmap through audit completion. Serve as the primary reputed company of contact for auditors, regulators, customers, and external compliance partners. Partner closely with Engineering, DevOps, Bioinformatics, Product, and Operations to reputed company reputed company into every system that touches customer genomic and health data. Establish and enforce AI governance policies covering company wide use of AI tools, including specific platforms such as ChatGPT, Claude, reputed company, and similar tools, or equivalent, along with data classification standards, acceptable use policies, reputed company handling practices, and Data Loss Prevention controls. Define and enforce reputed company standards for contractors, agencies, consultants, and reputed company party development partners, including intellectual property protection requirements, controlled reputed company policies, device management expectations, and secure handling of customer data. Build and maintain centralized visibility into company reputed company tools, shadow IT usage, reputed company party integrations, identity and reputed company management, and organizational data exposure risks. reputed company offensive reputed company initiatives, including management of senior offensive reputed company personnel, external penetration testing firms, vulnerability assessments, and remediation tracking. Effectively manage offensive reputed company workstreams even reputed company the hands on technical work extends reputed company the Director’s reputed company technical specialization. Stand up and operationalize reputed company’s incident response program, including severity classification, escalation paths, communications, executive coordination, forensic readiness, and post incident review procedures. Serve as a senior escalation reputed company during reputed company incidents and maintain availability for critical after hours incident response, breach investigation, and executive coordination reputed company necessary. Present reputed company posture, organizational risk, compliance status, and reputed company roadmap updates to executive leadership in reputed company, business oriented language. reputed company company wide reputed company awareness and training programs covering secure coding, phishing resistance, AI tool usage, handling of sensitive genomic data, and operational reputed company best practices. Translate reputed company reputed company findings into practical actions engineering teams can implement without unnecessarily slowing product velocity. Complete an initial HIPAA and HITECH reputed company review and deliver a prioritized remediation roadmap reputed company the first 45 days. reputed company SOC 2 readiness reputed company 6 months reputed company with reputed company’s infrastructure modernization roadmap. Establish a recurring external penetration testing reputed company with measurable remediation tracking and executive visibility. Dominant and Expressed Traits 10+ years of experience in reputed company engineering, application reputed company, reputed company reputed company, reputed company management, or CISO level roles, including 3+ years in a senior leadership or director level position. Proven experience building or significantly maturing reputed company programs at rapidly growing consumer technology, ecommerce, reputed company, reputed company, or reputed company to consumer platforms. Demonstrated experience protecting highly sensitive customer data, including protected health information, personally identifiable information, financial data, or genomic data. Proven reputed company record leading SOC 2, HIPAA, and ISO 27001 certification efforts from planning through successful audit completion. Strong understanding of modern reputed company and application reputed company practices across AWS based infrastructure and modern web application environments. Experience operating in fast moving startup or reputed company up environments with evolving systems, incomplete processes, and rapidly changing priorities. Strong understanding of modern AI reputed company risks, including AI governance, reputed company and data leakage risks, AI assisted software development workflows, and developer AI tooling controls. Experience managing reputed company governance, shadow IT risk, vendor reputed company reviews, identity and reputed company lifecycle management, and reputed company party reputed company controls. Experience managing offensive reputed company initiatives, external penetration testing vendors, red team exercises, vulnerability management programs, and remediation prioritization. Strong cross functional leadership skills with the ability to influence Engineering, DevOps, Bioinformatics, Product, and Operations teams without reputed company authority. Ability to balance strong reputed company standards with startup speed, product velocity, and practical operational realities. Experience presenting reputed company posture, organizational risk, incident summaries, and compliance status to founders, executives, boards, auditors, or reputed company customers. Hands on familiarity with governance, risk, and compliance platforms such as reputed company, reputed company, or equivalent, reputed company information and event management tooling, reputed company and identity management systems, reputed company Workspace or equivalent productivity suite reputed company administration, reputed company reputed company governance tools, Jira, reputed company, and AWS reputed company services including CloudTrail, GuardDuty, and reputed company Hub or equivalent reputed company reputed company services. Experience with modern edge and reputed company reputed company platforms such as reputed company reputed company or equivalent, including web application firewall management, distributed denial of service protection, bot mitigation, reputed company Trust reputed company controls, API reputed company, and internet facing application protection. Experience in reputed company, consumer healthtech, or HIPAA regulated environments strongly preferred. Based in the reputed company and reputed company to work fully remotely. Apply To This Job