Pennsylvania or Maryland or Washington or North Carolina or Louisiana or Kentucky or Kansas or Indiana or Illinois or Georgia or Iowa or Florida or Colorado or California or Delaware or Connecticut or Arkansas or Arizona or Alabama or Alaska or Nevada or Vermont or Tennessee or Idaho or Oklahoma or Hawaii or Mississippi or Utah or New Hampshire or New Mexico or Wyoming or North Dakota or South Dakota or Rhode Island or West Virginia or Montana or Texas or District of Columbia or Ohio or New Jersey or Oregon or South Carolina or Missouri or Virginia or Massachusetts or Nebraska or Minnesota or Michigan or Wisconsin or New York or Maine
$79k-$127k/yrRemoteFull Time
Highmark Health: Provides health insurance and integrated medical care services.
3+ YOEPerform information risk assessments, score and document risks, support compliance (PCI-DSS,HITRUST,ISO27001), present findings, and partner on security architecture and remediation.
ARCHER, IPS, firewalls, endpoint protection, web/email filtering, Data Loss Prevention (DLP), digital rights management, encryption, Security Event and Incident Management (SEIM), virtualization platforms, HITRUST CSF, NIST 800-83, PCI, HIPAA, HITECH, COBIT, ISO 27001/2, ITIL 3, NIST AI RMF, ISO/IEC 42001
HaemoneticsNYSE: HAE: Manufactures medical devices for blood and plasma management.
10+ YOE10+ years software engineering with 5+ years in principal/architect roles; expert C# or Java/Python; experience with REST APIs, microservices, event-driven systems, CI/CD, containerization, SQL/NoSQL, AWS and Terraform; security and compliance (OWASP, OIDC, SAML2, SOC2, ISO27001, HIPAA).
QuEra Computing: Develops and operates neutral-atom quantum computing systems.
4+ YOEBachelor's or equivalent experience, 4+ years in information security/systems/DevOps, cloud and networking knowledge, vulnerability management, security frameworks (SOC 2/ISO27001/NIST), strong communication.
Tenable, CrowdStrike, Qualys, Rapid7, AWS Inspector, Microsoft Purview, AWS, Azure, Oracle Cloud, Jira, SIEM, Splunk, Microsoft Sentinel, Python, PowerShell, Bash
Richmond or St. Louis or Cleveland or Philadelphia or Chicago or San Francisco or New York City or Kansas City or Boston or Atlanta or Minneapolis or Dallas
$113k-$187k/yrOnsiteFull Time
Federal Reserve System: The central bank of the United States.
6+ YOE6+ years product/network experience; hands-on with Ansible, Terraform, Python; knowledge of routing, switching, firewalls, zero-trust, and compliance frameworks (NIST,FedRAMP,CMMC,ISO27001); strong communication and product leadership.
Analog DevicesNASDAQ: ADI: Designs and manufactures semiconductors for signal processing and power management.
7+ YOERequires a technical degree, 7+ years in DevSecOps or cloud security, AWS expertise, CI/CD and application security experience, healthcare compliance knowledge, and secure cloud platform experience.
JRNI: Enterprise appointment scheduling and customer interaction software platform
Experienced leader in information security and cloud operations with expertise in ISO 27001 and SOC 2 compliance, AWS/GCP production infrastructure, SIEM/EDR/CSPM tooling, IAM, incident response, audits, and team leadership.
ISO 27001, SOC 2, NIST AI RMF, ISO 42001, AWS, GCP, SIEM, EDR, CSPM, SSO, MFA, SCIM, CI/CD
Fidelity Investments: Provides investment management, retirement planning, and brokerage services.
5+ YOERequires 5+ years in IT assurance at a Big 4 or similar audit firm, cybersecurity or IT audit/risk experience, project management, and knowledge of SOC, PCI-DSS, HITRUST, Swift CSP, ISO/IEC 27000, and NIST frameworks.
Vertex PharmaceuticalsNASDAQ: VRTX: Develops and sells prescription drugs for serious genetic diseases.
10+ YOE10+ years cybersecurity engineering experience designing and operating enterprise security platforms; deep expertise with network, cloud, SaaS, Zero Trust, Palo Alto Networks, AWS/Azure, and regulated environments.
Zero Trust - SASE - Infrastructure Security Consultant
Philadelphia or Milwaukee or Dallas or Columbus or Cincinnati or New York City or Cleveland or Austin or Albany or Chicago or St. Petersburg or Hartford or Pittsburgh or St. Louis or Miami or Sacramento or Raleigh or Minneapolis or Mountain View or Scottsdale or Morristown or San Francisco or Boston or Denver or Des Moines or Overland Park or Los Angeles or Charlotte or Carmel or Seattle or Houston or Arlington or Atlanta or Beaverton or Detroit or San Diego
$54k-$206k/yrFieldFull Time
AccentureNYSE: ACN: Global provider of management consulting and technology services.
3+ YOERequires 3+ years with Prisma Access and Zscaler or Zero Trust network security, 3+ years project management and risk assessments, 2+ years technical writing, and a bachelor's degree or equivalent experience.
Prisma Access, Zscaler, Zero Trust Network Access (ZTNA), Remote Browser Isolation (RBI), ISO 27000, NIST 800 Series, COBIT, AWS, Azure, Softlayer, VMware, Microsoft 401(k)
BC Platforms: Provides secure data platforms for healthcare and life sciences.
8+ YOE8+ years in security, compliance or governance; CISSP or CISM preferred; experience with ISO 27001, GDPR, SOC 2, GxP/21 CFR Part 11; cloud security, audit readiness, stakeholder engagement and strong communication.
ISO 27001, GDPR, SOC 2, GxP, 21 CFR Part 11, EHDS, EU AI Act
Assoc Dir, Information Security Governance Risk & Compliance
Boston, Massachusetts, United States
$179k-$212k/yrHybridFull Time
Servier: Independent global pharmaceutical group developing innovative treatments for patients.
8+ YOE3+ Mgmt8+ years in information security GRC or related discipline, 3+ years leadership, expertise with risk frameworks, audit readiness, third-party risk, and strong executive communication.
Fidelity Investments: Provides investment management, retirement planning, and brokerage services.
5+ YOEExpertise in IT risk and cybersecurity, audited frameworks (SOC1/2/3, PCI-DSS, HITRUST, ISO27000, Swift CSP), NIST, 5+ years Big 4 IT assurance experience, bachelor’s in tech preferred, cybersecurity certifications a plus.
Imprivata: Provides digital identity and security management for healthcare organizations.
12+ YOE5+ MgmtLead global information security program; drive strategy, risk management, and compliance; oversee security architecture and team; partner with executives.
Bethesda or Richmond or Cleveland or Raleigh or Philadelphia or Boston or Atlanta or Jacksonville or Houston
$160k-$175k/yrRemoteFull Time
3E: Provides software and data for chemical regulatory compliance management.
6+ YOE2+ MgmtBachelor's degree or equivalent, 6+ years technical engineering experience, 2+ years leading or mentoring engineers, deep knowledge of trust engineering/AI security, stakeholder influence, and strong communication skills.
Senior Director, Chief Information Security Officer
Cambridge, Massachusetts, United States
$245k-$325k/yrOnsiteFull Time
Scholar RockNASDAQ: SRRK: Develops monoclonal antibodies for serious neuromuscular and metabolic diseases.
12+ YOEBachelor's degree and 12+ years of progressive cybersecurity experience required, including enterprise program leadership, regulated environments, governance, risk, compliance, vendor management, executive communication, and CISSP certification.
NIST Cybersecurity Framework, Computer System Validation, Quality Management Systems, SOX, CISSP, CISM, CRISC, CCSP, GIAC, CISA, ISO 27001
Nexthink: Provides software to manage and optimize digital employee experiences.
5+ MgmtRequires 5+ years of people management, scaled IT end-user support experience, automation and AI support tooling experience, ITIL certification, university degree, Spanish fluency, and professional English.
Spark, ITSM, Nexthink, ISO 27001, SOC 2 Type II, SLAs, KPIs
Emburse: Provides AI-powered travel and expense management software for businesses.
7+ YOE2+ MgmtBachelor's degree and 7+ years in information security, risk, or compliance, including 2+ years managing people. Requires GRC, risk, audit, metrics, privacy, AI governance, and compliance platform experience.
Drata, Vanta, NIST, ISO 27001, ISO 27701, PCI DSS, SOC 1, SOC 2, NIST AI RMF, ISO/IEC 42001, EU AI Act, Tx-RAMP, GDPR, PIPEDA, CCPA, CPRA, SOX
KlaviyoNYSE: KVYO: Software platform for automated e-commerce marketing and customer data.
10+ YOE10+ years infrastructure/platform security experience; deep cloud security (AWS/GCP IAM, mTLS), secrets management, IaC and CI/CD controls, vulnerability and SLO-driven remediation, threat modeling, and experience with compliance frameworks.
AWS, GCP, mTLS, IaC, CI/CD, SOC 2, ISO 27001, GDPR, AI