Medical Home Network

Director of Security

Medical Home Network

full-time

Posted on:

Location Type: Hybrid

Location: United States

Visit company website

Explore more

✨ AI Apply
Apply

Job Level

Lead

Tech Stack

AzureCloud

About the role

  • - Own and evolve MHN’s enterprise security strategy aligned with business goals and healthcare regulatory requirements.
  • - Serve as the primary security leader and trusted advisor to Technology, Product, and Executive leadership.
  • - Build strong partnerships with Engineering, Infrastructure, DevOps, and Compliance teams.
  • - Lead security architecture and controls within Microsoft Azure, including identity and access management, network security, encryption, logging, and monitoring.
  • - Partner with infrastructure and networking teams to secure cloud, hybrid, and third-party environments.
  • - Ensure secure design and implementation of systems supporting healthcare data and applications.
  • - Lead and maintain compliance with healthcare security and privacy regulations, including HIPAA, HITRUST, SOC 2, and related frameworks.
  • - Act as the owner and driver of HITRUST certification, including preparation, audits, remediation, and ongoing compliance.
  • - Collaborate closely with Compliance, Legal, and Risk teams to interpret and operationalize regulatory requirements.
  • - Develop and oversee security risk assessments, threat modeling, and vulnerability management programs.
  • - Own incident response planning, tabletop exercises, and real-world incident management.
  • - Manage third-party security risk, vendor assessments, and security reviews.
  • - Establish and maintain security policies, standards, and governance frameworks.
  • - Ensure strong security awareness and best practices across the organization.
  • - Support MHN’s commitment to being a high-trust partner to providers, payers, and customers.

Requirements

  • - Bachelor’s degree, or equivalent experience.
  • - 8+ years of experience in technology roles, with progressive responsibility in security leadership.
  • - Strong technical background in infrastructure, networking, cloud engineering, or DevOps, prior to or alongside security roles.
  • - Hands-on experience leading HITRUST certification efforts (required).
  • - Deep understanding of healthcare security and regulatory landscapes (HIPAA, HITRUST, SOC 2, etc.).
  • - Proven experience securing Microsoft Azure environments.
  • - Ability to translate complex security concepts into clear business and risk discussions.
  • - Experience working in healthcare, health tech, payer, provider, or value-based care environments.
  • - Experience in healthcare technology organizations.
  • - Familiarity with identity platforms, zero trust models, and modern cloud security tooling.
  • - Prior experience scaling security programs in growing organizations.
  • - Relevant certifications (CISSP, CISM, CCSP, Azure Security certs) are a plus.
Benefits
  • - Fun, challenging, and collaborative work environment with passionate colleagues that care deeply about healthcare delivery.
  • - Recognized as One of the Best Places to Work in Healthcare by Modern Healthcare.
  • - Competitive benefits programs including Medical, Vision, Dental, HSA, FSA, and 401k.
  • - Fitness reimbursement, commuter benefits, and tuition assistance.
  • - Great work life benefits- Paid time off, sick time, and 12 paid holidays.
  • - Remote/Hybrid Schedule: This role follows a hybrid work model. Candidates within 50 miles of Chicago are expected to work onsite two days per week (Monday and Tuesday) and remotely three days per week. Candidates outside of the 50-mile radius are eligible for fully remote work.
Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools
security architectureidentity and access managementnetwork securityencryptionloggingmonitoringvulnerability managementincident response planningrisk assessmentscloud engineering
Soft Skills
leadershipcommunicationcollaborationpartnership buildingrisk managementproblem-solvingstrategic thinkingorganizational skillsadaptabilitysecurity awareness
Certifications
CISSPCISMCCSPAzure Security certificationsHITRUST certification