Forus

Security Operations Lead

New York office. Posted 4 months ago

The role

You will own compliance programs including SOC 2, HIPAA, and HITRUST. You will build a customer trust function and manage third-party security risk to enable enterprise decisions.

What you will do

  • Own compliance programs end to end from readiness through audit and continuous monitoring
  • Build and run the customer trust function including security questionnaires, RFPs, due diligence, and trust center
  • Own third-party and vendor security risk including diligence, control assessments, and ongoing monitoring
  • Build compliance automation for evidence collection, control monitoring, and audit preparation
  • Define security policies and run security-awareness programs
  • Drive access reviews and audit readiness across the company
  • Partner with engineering and legal to translate requirements into concrete controls
  • Coordinate external auditors and penetration-testing firms
  • Own the risk register and provide visibility to leadership

Required qualifications

  • 8+ years in security, compliance, or risk
  • Experience standing up a security and compliance program from scratch
  • Hands-on experience with SOC 2 and HIPAA
  • Fluency with compliance automation tooling
  • Technical depth to work with engineers on cloud, identity, logging, and application controls
  • Experience owning customer-facing security with enterprise buyers
  • Strong written and verbal communication

Nice to have

  • HITRUST experience
  • Evidence of standing up a new framework or program from scratch

Benefits

  • Meaningful equity
  • Fully covered medical, vision, and dental insurance
  • Memberships for One Medical, Talkspace, Teladoc, and Kindbody
  • Unlimited paid time off (PTO)
  • 16 weeks of parental leave
  • 401K plan setup
  • FSA option
  • Commuter benefits
  • DashPass
  • Lunch at the office every day
  • Dinner at the office after 6:30 pm

About the company

Forus is building an AI-powered network that connects doctors, pharmacies, payers, and biopharma to accelerate new science to patients. The platform automates complexity between prescribing medicine and patients starting treatment.