HealthSnap (healthsnap.io) empowers patients and their physicians to improve health outcomes using an innovative platform for modern, proactive patient care.  We help healthcare organizations easily manage chronic conditions remotely, and deliver personalized patient experiences when it's needed most.

Be part of an organization built on teamwork, innovation, mutual respect, and equity for all. We believe in the power of prevention over treatment, after our co-founders experienced how modern healthcare failed their loved ones, they knew there had to be a better way. We believe that every patient deserves to receive the right care, at the right time, and in the right location - regardless of their condition or status. 

We lead with empathy above all else, and place the patient at the center of everything we do. Working at HealthSnap means being part of a family and a team where if you win, we all win, no matter how big or small the accomplishment. We take ownership - and lead with empathy - and expect each employee to recognize that real patients rely on HealthSnap every day.

Company Overview:

HealthSnap is a leading virtual care management company committed to delivering excellence in remote patient monitoring and chronic care management programs. As a recognized leader in our field, we prioritize security and compliance to safeguard our operations and the data of our customers. We are proud to be HITRUST certified, demonstrating our dedication to maintaining the highest standards of security in the industry.

Key Responsibilities:

1. HITRUST Compliance: Ensure continuous compliance with HITRUST standards and requirements, including conducting regular risk assessments, gap analyses, and remediation efforts.

2. Security Strategy: Develop and implement a comprehensive security strategy aligned with business objectives and industry best practices, focusing on risk management, threat detection, incident response, and security awareness.

3. Security Operations: Oversee day-to-day security operations, including monitoring systems, analyzing security alerts, investigating incidents, and coordinating with internal teams, external partners, and vendors such as CrowdStrike to mitigate threats effectively.

4. Security Infrastructure: Evaluate, implement, and manage security technologies and solutions, such as CrowdStrike Falcon platform, firewalls, intrusion detection systems, endpoint protection, encryption, and identity/access management tools.

5. Policies and Procedures: Establish and enforce security policies, standards, and procedures to ensure consistent adherence to security practices across the organization.

6. Training and Awareness: Develop and deliver security awareness training programs to educate employees about security risks, policies, and best practices.

7. Incident Response: Lead incident response efforts, including developing incident response plans, coordinating response activities, and leveraging CrowdStrike expertise for threat intelligence and incident investigation.

8. Vendor Management: Evaluate security risks associated with third-party vendors, including CrowdStrike, and manage vendor relationships to ensure compliance with security requirements.

9. Security Governance: Provide guidance and support to senior leadership and the board of directors on security matters, including presenting security updates, risk assessments, and recommendations for improving security posture.

10. Security Audits and Assessments: Coordinate and support internal and external security audits and assessments, responding to auditor inquiries and ensuring timely resolution of findings.

Qualifications:

• Bachelor’s degree in Computer Science, Information Security, or related field; Master’s degree preferred.

• Minimum of 5 years of experience in information security

• In-depth knowledge of HITRUST framework, standards, and requirements.

• Experience working with security partners such as CrowdStrike and familiarity with their products and services.

• Strong understanding of cybersecurity principles, practices, technologies, and trends.

• Experience with security technologies and tools, such as SIEM, IDS/IPS, DLP, and vulnerability management.

• Excellent communication and interpersonal skills, with the ability to effectively communicate complex security concepts to technical and non-technical stakeholders.

Compensation Detail: Education, experience and tenure may be considered along with internal equity when job offers are extended.