Director, Security Operations – Infrastructure

Phreesia

Director, Security Operations & Infrastructure at Phreesia managing enterprise-wide security incident response. Leading operational excellence in security tooling and incident operations.

Posted 6/16/2026full-timeRemote • 🇨🇦 CanadaLead💰 CA$230,000 - CA$255,000 per yearWebsite

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud PlatformLinuxMacOS

About the role

Key responsibilities & impact

Own enterprise-wide security incident response —ensure the team can detect, triage, contain, eradicate, and recover from incidents across cloud, on-prem, SaaS, and endpoint environments with speed and precision.
Maintain and continuously improve the incident response plan, playbooks, escalation procedures, and communication templates, ensuring they are tested, current, and aligned to NIST CSF 2.0.
Serve as incident commander or executive sponsor for high-severity incidents; make real-time decisions on containment and remediation under pressure.
Drive post-incident reviews that produce actionable findings, root-cause analysis, and measurable improvements—not just documentation.
Coordinate threat response across US and India teams, ensuring consistent coverage, quality, and process regardless of geography.
Partner with Legal & Privacy throughout the incident response lifecycle—ensuring timely notification assessments, evidence preservation, regulatory reporting obligations, and litigation hold requirements are met in coordination with response activities.
Own the security and IT tooling portfolio across the company: endpoint management (MDM, EDR), identity infrastructure, SIEM/SOAR, network security, vulnerability scanning, email security, cloud security posture management, and related platforms.
Build and maintain operational metrics and dashboards that provide the CISO and leadership with clear visibility into incident trends, MTTD/MTTR, tool health, SLA performance, and infrastructure posture.

Requirements

What you’ll need

Bachelor’s degree required; advanced degree preferred.
One or more preferred: CISSP, CISM, GIAC (GCIH, GCIA, GCFA), CCSP, or similar.
Incident response or forensics certifications (GCIH, GCFE, GCFA, EnCE) are a strong differentiator.
10+ years in information security, with 5+ years in leadership roles managing security operations, incident response, or infrastructure/engineering teams.
Proven experience managing a team of senior engineers/architects responsible for running a broad portfolio of security and IT tools in a multi-cloud (AWS, Azure, GCP) and multi-OS (Windows, macOS, Linux) environment.
Experience in healthcare, health IT, payments, or other highly regulated data environments where PCI, HITRUST, SOX, and SOC 2 interact.
Strong technical fluency across: SIEM/SOAR platforms, EDR/XDR, network security, cloud security (AWS, Azure, GCP native controls), endpoint management (MDM, patching), identity infrastructure, and vulnerability management.

Benefits

Comp & perks

Remote First: 100% Remote work + home office expense reimbursements+ monthly reimbursement for cell phone, internet and wellness.
Top of market rewards: Competitive compensation
Take time when you need time: Flexible PTO + company holidays
Top class healthcare benefits: Variety of healthcare benefits for you and your family (and your pets!) starting day one
Care about your families: Generous top-up for parental leave benefits
Support personal development: Continuing education and professional certification reimbursement
Connecting in person: Various offsite events and activities for team to connect and meet in person, to support team building and engagement.
Giveback to community: Local in-person volunteer events, and give back programs to our communities.
Recognition and perks: We have a company wide recognition tool (Phireworks) to celebrate milestones, recognize achievements and strengthen your bond with your teams. You can accumulate points and redeem them for a wide catalogue of items!
Diversity and inclusive environment: At Phreesia, all employees are encouraged to bring their authentic self to work, feel supported and perform at their best. We have a variety of Employee Resources Groups (ERGs) which bring together individuals from a wide range of backgrounds, experiences and perspectives, and seek to foster a sense of shared community and empowerment for employees who share a common social identity, such as gender, race, ethnicity, and sexual orientation. Opportunity to join an Employee Resource Group.

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

incident responseforensicsroot-cause analysisvulnerability managementcloud securitynetwork securityendpoint managementidentity infrastructureSIEMSOAR

Soft Skills

leadershipdecision makingcommunicationteam coordinationpressure managementanalytical thinkingproblem solvingcollaborationoperational metricsprocess improvement

Certifications

CISSPCISMGIACGCIHGCIAGCFACCSPGCFEEnCE