Sr Director, Cybersecurity in United State

Overview

Sr Director, Cybersecurity

(Remote)

About Us:

Matrix Medical Network is the nation’s leading independent provider of comprehensive in-home health assessments, serving Medicare Advantage, Managed Medicaid and Commercial patients across all 50 states. With a network of 3,000 + clinicians, we deliver personalized Whole Person Care that includes diagnostic testing, risk identification, medication management and preventive health education, empowering people to better manage acute and chronic conditions. Guided by our mantra- We see you. We hear you. We’ve got you.- and our core values of Integrity, Accountability, Trust, Respect and Passion, we are committed to creating a culture where both patients and teammates feel valued, supported and heard.

Responsibilities

About the role:

Type: Full Time Salaried

Compensation: $151K - $227K (30% Bonus)

Location: Fully Remote, must be in the United States

Hours: Full Time Days

Benefits Offered to include: Medical, Dental, Vision, paid time off, paid holidays, 401K with company matching, voluntary life insurance, short term disability, long term disability, employee assistance program, health savings account, flexible spending accounts, additional voluntary benefits available.

What To Expect:

We are seeking an experienced and strategic and hands-on Sr Director of Cybersecurity with deep experience in healthcare compliance and information security frameworks. and ensure the protection of our cloud and colocation (COLO) data centers. This role will lead the enterprise cybersecurity program and take ownership of our HITRUST CSF certification lifecycle, ensuring alignment with HIPAA, HITECH, and other regulatory standards. You will collaborate cross-functionally to protect sensitive healthcare data, maintain audit readiness, and proactively reduce risk.

Responsibilities:

Cybersecurity Strategy & Leadership

• Develop and implement a comprehensive cybersecurity strategy that aligns with business objectives and regulatory requirements (HIPAA, HITRUST CSF, ISO 27001, NIST).
• Lead and mentor the IT Security Architect and security team members, ensuring best practices are followed across cloud and on-premises environments.
• Maintain HITRUST certification annually and ensure continued alignment with evolving CSF versions and healthcare regulations.
• Monitor and track progress using GRC tools and audit dashboards.
• Serve as the cybersecurity champion, fostering a culture of security awareness and continuous improvement throughout the organization.
• Collaborate with senior leadership and stakeholders to align security initiatives with business goals.
• Define and communicate a 12-18 month strategy and 2-3 year maturity roadmap with corresponding budget and resource recommendations.
  
  

Cloud & Hybrid Security Management

• Oversee cybersecurity architecture for Azure cloud and COLO data centers, ensuring integration and compliance with security policies.
• Implement and manage security controls, including identity and access management (IAM), encryption, network security, and continuous monitoring.
• Ensure zero-trust security principles are embedded in all cloud and on-premises environments.
  
  

Threat Management, Risk & Compliance

• Develop and execute a risk management framework, conducting regular security audits, risk assessments, and vulnerability testing.
• Ensure compliance with industry regulations (HIPAA, HITRUST CSF, ISO 27001, NIST, CIS Controls) and oversee security governance initiatives.
• Establish and maintain third-party security risk management, ensuring compliance from vendors, including COLO providers.
  
  

Incident Response & Disaster Recovery

• Lead Incident Response (IR) efforts, ensuring rapid detection, response, and recovery from cyber threats.
• Develop and maintain a Disaster Recovery (DR) and Business Continuity Plan, ensuring regular testing and updates to address evolving threats.
• Serve as the key decision-maker during security incidents, coordinating with internal teams and external partners to mitigate risks.
  
  

Security Operations & Collaboration

• Work closely with IT Engineering and our Security Architect to design and implement secure infrastructure, applications, and systems.
• Oversee security monitoring and threat intelligence programs to proactively identify and mitigate risks.
• Manage security tools and technologies, including SIEM, firewalls, endpoint protection, and cloud security solutions.
• Establish and report measurable KPIs (patching cadence, vulnerability closure rates, phishing click rates, endpoint compliance).
  
  

Security Awareness & Emerging Threats

• Lead cybersecurity awareness training to educate employees on security best practices and emerging threats.
• Stay ahead of evolving cybersecurity threats, technologies, and industry trends, ensuring the organization’s security posture remains resilient.
• Promote a culture of accountability, continuous learning, and security-first thinking across the enterprise.
  
  

Qualifications

Must Haves:

• Bachelor’s or Master’s degree in Cybersecurity, Information Security, Computer Science, or a related field.
• 5+ years of experience in cybersecurity leadership roles, with expertise in cloud security, risk management, and compliance.
• Deep knowledge of cloud security (Azure), including relevant certifications (Azure Security Engineer).
• Strong understanding of security frameworks and compliance (NIST, CIS, ISO 27001, HIPAA, HITRUST CSF).
• Experience managing colocation (COLO) data centers and hybrid cloud security.
• Proven track record in Incident Response, Disaster Recovery, and Business Continuity Planning.
• Strong leadership, communication, and collaboration skills, with experience working cross-functionally at all levels.
  
  

Preferred Certifications:

• CISSP (Certified Information Systems Security Professional)
• CISM (Certified Information Security Manager)
• CCSP (Certified Cloud Security Professional)
• Azure Security Certifications
  
  

Our Culture:

• We have a clear vision of where we are going, and we are guided by core values that embody our organization and our culture.
• We emphasizes innovation and growth, and you will be given the opportunities and tools to develop personally and professionally.
• We encourage and celebrate collaboration.
• We have a deep commitment to positively impact the communities in which we work and to make a difference in the lives of who we serve.
  
  

Matrix Medical Network is an Equal Employment Opportunity Employer. It is the policy of Matrix to provide equal employment opportunities without regard to race, color, religion, sex, gender identity or expression, pregnancy, age, national origin, age, disability, marital status, veteran status, sexual orientation, genetic information or any other protected characteristic under applicable law. It is also the policy of Matrix that qualified individuals with disabilities receive equal opportunity in regard to job application procedures, hiring, and all aspects of the employment process. Matrix is committed to the full inclusion of all qualified individuals. Consistent with the Americans with Disabilities Act (ADA) and applicable state and local laws, it is the policy of Matrix to provide reasonable accommodation when requested by a qualified applicant or employee with a disability, unless such accommodation would cause an undue hardship. If reasonable accommodation is needed to participate in the job application or interview process, pre-employment testing, to otherwise participate in the selection process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact MatrixHR@matrixhealth.net.