Director of Cybersecurity

Job Title: Director of Cybersecurity

Location: Dallas, TX (preferred) / Hybrid

Job Summary:

We are seeking an experienced and hands-on Director of Cybersecurity to lead our cybersecurity initiatives at a dynamic and fast-growing Healthcare SaaS company of 700-800 employees. Reporting directly to the CTO, this role requires a strategic thinker with the technical prowess to implement and maintain robust cybersecurity defenses in a fast-paced startup environment. The ideal candidate will have an extensive background as a cybersecurity professional within SaaS or software product companies and a proven track record of managing and evolving cybersecurity programs to protect company assets, data, and customer information.

Key Responsibilities:

• Develop, implement, and monitor a comprehensive cybersecurity program that aligns with business objectives and mitigates security risks.
• Lead all aspects of cybersecurity operations, including threat detection, incident response, vulnerability management, and security compliance.
• Collaborate with cross-functional teams to establish cybersecurity best practices and ensure security is built into the development lifecycle.
• Conduct regular risk assessments, security audits, and penetration testing to identify and address vulnerabilities.
• Lead incident response efforts, including forensic investigations, root cause analysis, and corrective action planning.
• Stay current with emerging cybersecurity threats, industry trends, and regulatory requirements to continually enhance the company’s security posture.
• Develop and enforce security policies, standards, and protocols to ensure compliance with applicable regulations (e.g., HIPAA, SOC 2).
• Mentor and guide a team of cybersecurity professionals, fostering a collaborative, high-performance culture.

Qualifications:

• Experience: 8-10 years in cybersecurity, with a background in Healthcare.
• Industry Experience: Experience in a Healthcare SaaS or software product that operates in a fast-paced, startup-style environment is highly preferred.
• Technical Skills:
• Hands-on expertise in threat detection, incident response, vulnerability management and assessment, and security architecture.
• Strong IAM experience with SSO and MFA
• Solid experience with NIST Cybersecurity Framework, HITRUST, and ISO 27001
• Strong understanding of network security, cloud security, and secure software development practices.
• In-depth understanding of HIPAA
• Education: Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field; relevant certifications (e.g., CISSP, CISM, CEH) are a plus.
• Soft Skills: Strong leadership and communication skills; ability to collaborate effectively with technical and non-technical stakeholders; a proactive, problem-solving mindset.

Equal Opportunity Statement:

BigRio is an equal-opportunity employer. We prohibit discrimination and harassment of any kind based on race, religion, national origin, sex, sexual orientation, gender identity, age, pregnancy, status as a qualified individual with disability, protected veteran status, or other protected characteristic as outlined by federal, state, or local laws. BigRio makes hiring decisions based solely on qualifications, merit, and business needs at the time. All qualified applicants will receive equal consideration for employment.