• Lead execution of the enterprise information security program aligned with business objectives, regulatory requirements, and risk tolerance. • Translate security strategy into prioritized roadmaps, operational plans, and measurable outcomes. • Maintain and evolve security policies, standards, and procedures for a healthcare SaaS environment. • Act as a trusted security advisor to Product, Engineering, IT, and Customer Operations. • Ensure strong safeguards for PII and PHI throughout the benefits lifecycle. • Support customer security due diligence (questionnaires, audits, BAAs). • Partner with Legal and Privacy on risk assessments and regulatory‑appropriate incident handling. • Own or support compliance with HIPAA/HITECH, HITRUST CSF, and SOC 2 Type II. • Oversee threat detection/response, vulnerability management, IAM, endpoint security, and incident response processes. • Lead or coordinate security incident response, including containment, communication, and executive updates. • Drive continuous improvement through post‑incident reviews and control enhancements. • Partner with Engineering and Infrastructure teams to secure AWS and/or Azure environments, CI/CD pipelines, and SaaS architecture. • Ensure security is embedded into SDLC, cloud design, configuration management, and change management. • Promote secure‑by‑design and defense‑in‑depth principles. • Manage MSSPs/MDRs supporting day‑to‑day security operations. • Lead RFPs, vendor evaluations, contract negotiations, and renewals. • Oversee third‑party risk for vendors accessing sensitive benefits data. • Define and track security KPIs, KRIs, and control maturity measures. • Provide concise, meaningful reporting to the CISO and executive leadership. • Communicate risks and recommendations in business‑focused language. • Build, mentor, and develop a high‑performing security team. • Foster a culture of accountability, collaboration, and continuous improvement. • Lead security awareness and training programs. • Champion a security‑first mindset that supports innovation.