Director of IT Security

Job description

About this role

About Aidoc Aidoc is the market leader in healthcare AI and has developed the world's largest clinical frontier model, supporting nearly 50 million patients each year. Aidoc is deployed in more than 2,000 medical centers worldwide. Since our founding in 2016, Aidoc has raised over $500 million and achieved a record number of FDA-cleared solutions. Medical diagnosis is hitting a breaking point, where the number of physicians hasn't kept up with the rapidly growing patient load. This leads to misdiagnosis and treatment delays that result in hundreds of thousands of deaths every year. Aidoc assists clinicians by precisely highlighting diseases…

Responsibilities

• Lead and execute the corporate IT security roadmap and operating plan, and formulate IT Security procedures, standards, and security improvement initiatives, within the strategy and governance framework, in collaboration with the Director of IT.
• Manage the IT Security team, starting with a Security Engineer, and support the function's continued growth.
• Implement, operate, and improve security controls across identity and access management, endpoint security, DLP, SaaS, AI tools, and corporate systems, including access reviews, endpoint compliance, and secure configuration standards.
• Own the corporate vulnerability-management lifecycle, including risk-based prioritization, remediation SLAs, remediation tracking, reporting, and escalation.
• Lead the assessment and approval process for internal SaaS and AI tools, approving low- and medium-risk requests and escalating high-risk requests in collaboration with the Director of IT and the appropriate governance forum.

Qualifications and requirements

• Undergraduate degree and/or relevant experience in Information Security, Information Technology, Computer Science, or a related field.
• At least 8 years of experience in IT Security, Information Security, Security Operations, or a related field.
• Experience leading corporate security programs across identity and access management, endpoint security, SaaS, cloud, data protection, and security governance.
• Experience managing security controls, access reviews, vulnerability remediation, DLP, security monitoring, incident response, cyber resilience, and audit evidence.
• Experience with SaaS and AI security assessments, vendor security, and third-party risk management.