Senior Consultant, Security
Ascent Solutions
VP, Security and Compliance
Porter
full-time
Posted on:
Location Type: Remote
Location: Remote • 🇺🇸 United States
Visit company websiteJob Level
Lead
Tech Stack
AWSAzureCloudSDLC
About the role
- Develop and execute the organization’s security and compliance strategy, ensuring alignment with business objectives and regulatory requirements.
- Lead the implementation of zero-trust security principles across all platforms and environments.
- Oversee security governance for cloud platforms (AWS, Azure), SaaS applications (Salesforce, Microsoft 365), and EHR systems.
- Establish and maintain enterprise-wide security policies, standards, and procedures.
- Collaborate with DevOps, IT, and engineering teams to embed security into the software development lifecycle (SDLC) and infrastructure.
- Ensure compliance with HIPAA, SOC 2, ISO 27001, and other relevant frameworks.
- Lead risk assessments, vulnerability management, and incident response efforts.
- Manage relationships with external auditors, regulators, and security vendors.
- Build and lead a high-performing security and compliance team.
- Provide regular reporting to executive leadership and the board on security posture, risks, and compliance status.
Requirements
- Bachelor’s or Master’s degree in Information Security, Computer Science, or a related field.
- 10+ years of progressive experience in information security, compliance, or risk management, with at least 5 years in a leadership role.
- Proven experience managing security across AWS, Azure, Salesforce, Microsoft 365, and EHR platforms.
- Deep understanding of zero-trust architecture, identity and access management (IAM), data protection, and cloud security frameworks.
- Strong knowledge of HIPAA, SOC 2, ISO 27001, NIST, and other regulatory standards.
- Excellent leadership, communication, and stakeholder management skills.
- Industry certifications such as CISSP, CISM, CCSP, or AWS/Azure Security Specialty.
- Experience in a healthcare or life sciences environment.
- Familiarity with DevSecOps practices and secure cloud-native architectures.
Benefits
- Remote work environment
- Medical, dental and vision benefits within 30 days of hire
- Paid vacation and holidays
- A fun team and special culture
- Equipment Provided
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard skills
information securitycompliancerisk managementzero-trust architectureidentity and access managementdata protectioncloud security frameworksvulnerability managementincident responseDevSecOps
Soft skills
leadershipcommunicationstakeholder management
Certifications
CISSPCISMCCSPAWS Security SpecialtyAzure Security Specialty
