Cybersecurity Officer

Waymark is a mission-driven team of healthcare providers, technologists, and builders working to transform care for people with Medicaid benefits. We partner with communities to deliver technology-enabled, human-centered support that helps patients stay healthy and thrive. We’re designing tools and systems that bring care directly to those who need it most—removing barriers and reimagining what’s possible in Medicaid healthcare delivery.

At Waymark, our values are the foundation of how we work, grow, and support one another:

• Bold Builders: We tackle the toughest challenges in care delivery by harnessing the power of community and technology.
• Humble Learners: We seek feedback, embrace diverse perspectives, and welcome challenges to our assumptions.
• Experiment to Improve: We use data to inform decisions and continuously assess our performance.
• Focused Urgency: Our mission drives us to act swiftly and relentlessly in pursuit of meaningful results.

If this resonates with you, we invite you to bring your creativity, energy, and curiosity to Waymark.

• →Oversee the internal cybersecurity program, road map, and strategy, which includes developing and implementing procedures and policies designed to protect Waymark communications, systems, and assets from internal and external threats and that safeguards health information.
• →Oversee and manage Waymark’s MSSP and outsourced IT vendor, including responsibility for security and IT budgets, and IT tools used by Waymark.
• →Partner with Product, Engineering, Legal, and Compliance leadership to determine risks and deploy risk management processes, supporting Waymark’s secure software development lifecycle and ensuring that our internally developed products and services meet the expectations of our patients, customers and regulators
• →Own, define and oversee the necessary security operational functions such as Identity Management, Vulnerability Management, Incident Response, Security Awareness, and Vendor Risk Management
• →Serve as Waymark’s HIPAA Security Officer, ensuring compliance with the HIPAA Security Rule, working closely with the legal team to document, review, maintain, and implement standards, policies, and procedures within security disciplines.
• →Lead the strategy, implementation, and maintenance of industry-standard security certifications, including SOC2 Type II.
• →Conduct research, analysis, and correlation across a wide variety of source data to identify and prevent compromise of our networks, host systems, and data. 
• →Track and report on network security to the Waymark executive leadership team

• BSCS or equivalent experience in an operational security role
• 10+ years of experience in security and/or information assurance roles, and risk management, with a strong record of successfully managing information security, including experience working in a healthcare environment, with a strong understanding of HIPAA
• Knowledge of information security management frameworks, such as NIST cybersecurity framework
• Experience and/or ability to learn and apply hands-on skills in a cloud native production environment
• Experience implementing cloud security technologies, including encryption, network security, intrusion detection, and could monitoring
• Excellent verbal and written communication skills with the ability to simplify complex topics for understanding and decision making by technical and non- technical audiences

• Key industry certifications in information security, such as CISSP, CISM and CISA
• Experience in a startup of 100 - 500 people
• Experience with securing a production SaaS product hosted in AWS
• Experience conducting or managing technical audit engagements, or directly responding to auditor inquiries

US Employees in San Francisco/Bay Area, New York City - $175,000 - $231,000

US Employees in Boston, Los Angeles, Seattle, Washington DC - $161,000 - $212,000

US Employees in Arlington, Denver, San Diego, Sacramento - $154,000 - $203,000

US Employees in Albany, Atlanta, Austin, Baltimore, Central/Southern, Charlotte, Chicago, Dallas/Fort Worth, Detroit, Houston, Las Vegas, Miami, Milwaukee, Philadelphia, Portland, Research Triangle, Salt Lake City, Twin Cities - $140,000 - $185,000

US Employees in Baton Rouge, Birmingham, Charleston, Cincinnati, Cleveland, Daytona Beach, Indianapolis, Nashville, New Orleans, Omaha, Phoenix, Pittsburgh, St. Louis, Tampa - $135,800 - $179,400