Director of Information Security

The role

The Director of Information Security will lead the execution and maturity of the information security program. This person will lead the Information Security team and translate security strategy into measurable outcomes.

What you will do

• Translate CISO and executive strategy into clear priorities, roadmaps and measurable security outcomes
• Lead and develop the Information Security team, including hiring, coaching, performance management and organizational planning
• Establish security metrics, operating rhythms and reporting
• Provide leadership across security engineering, architecture, security operations, incident response, identity, cloud, application security and data protection
• Partner with IT and Engineering to embed secure-by-design practices, automation and modern engineering practices
• Lead security incident readiness and response
• Lead operational security capabilities supporting HIPAA, SOC 2, NIST and other applicable requirements
• Identify, assess and prioritize security risk based on business impact, materiality and organizational priorities
• Partner with leaders across Compliance, Legal, Privacy, Product, IT and Engineering to integrate security into business and technology decisions

Required qualifications

• 10+ years of progressive experience in information security, security engineering, security operations or related disciplines
• 3+ years of experience leading security teams or major security programs
• Demonstrated experience building, scaling or materially improving an enterprise information security program
• Broad technical experience across multiple security domains including identity, endpoint, SaaS, cloud, application security, security operations and data protection
• Strong understanding of security architecture, control design, incident response and risk management
• Experience operating in a regulated environment and translating regulatory requirements into practical controls
• Strong understanding of Zero Trust, least privilege, identity-centric security and secure-by-design principles
• Strong leadership, communication, judgment and cross-functional collaboration skills
• Ability to operate effectively in a high-growth environment with significant change and competing priorities
• Live within a 75-minute commute of our NYC office (near Union Square) and are able to work in-office 4 days per week

Nice to have

• Experience in healthcare, financial services or another highly regulated industry
• Experience supporting HIPAA, SOC 2, NIST, ISO 27001 or similar frameworks
• Experience leading multidisciplinary security teams
• Experience with enterprise identity, endpoint, cloud, SIEM, MDR, DLP and application security platforms
• Experience securing enterprise AI tools, LLM platforms or AI-enabled workflows
• Relevant certifications such as CISSP, CISM, CCSP or equivalent experience

Benefits

• Comprehensive benefits to all full-time, exempt employees
• Stock options

About the company

Charlie Health connects the world to life-saving behavioral health treatment through personalized, virtual care. The organization focuses on people with complex needs to expand access to meaningful care.