Director, Chief Information Security Officer (CISO)

The Role:

As a Director, CISO you’ll bring expert knowledge in IT and application security. You’ll lead and develop a lean, high-performing team in setting up or improving incident management procedures and protocols across the organization. You’re an established player-coach who can write infrastructure code to secure our systems and manage the security and IT team. You have previous CISO experience and have built and run a security program effectively.

Who you are:

• Demonstrate strong technical architecture and engineering skills along with the ability to switch between technology paradigms
• Adept at prioritizing value and shipping complex products requiring coordination across multiple teams
• Experience securing AWS and Kubernetes based applications
• Experience with threat modeling, open-source, and commercial security tools
• Ability to write code to solve security issues; writing security tools, or automation/management of security-sensitive environments
• Deep knowledge of AWS; how to configure least privileged access
• Use of tools such as Terraform, Istio for managing security in public cloud environments
• Use of vulnerability management tools (Tenable, CrowdStrike, Prisma, etc.)
• Hands-on experience with SIEM, IDS, IPS and WAF solutions
• Incident and IT security management 
• Familiarity with security and compliance frameworks such as HIPAA, HITRUST, SOC2, ISO 27001/27013, NIST 800-53
• General understanding of common web application deployment models and components
• Posses discretion and must be capable of conducting confidential internal investigations using Google Workspace Admin, Google Vault, and similar tools

How your skills and passion will come to life at Cerebral:

• Partner with Infrastructure, Engineering, Compliance, and Operations to ensure Cerebral’s end-to-end technology footprint is secure, utilizing preventative measures by matrix managing a security program for the entire organization
• Hands-on implementation of security controls including preventative threat detection and employee training meetings
• Develop, implement, and review security guidelines and configurations for an AWS based HIPAA compliant SaaS environment and a remote IT workforce
• Institute proactive security monitoring and alerting capabilities utilizing a combination of custom cools and strategic partners 
• Build security automation into infrastructure deployment and CI/CD pipelines
• Perform manual and automated compliance, vulnerability, and penetration testing
• Demonstrate and promote security best practices
• Constantly improve policies and procedures such as incident management while gaining buy-in across the department and organization

What we offer: 

• Mission-driven impact:
  • Shape the future of the #1 largest and fastest growing online mental health care company in the world
  • Build a platform that is improving the lives and well-being of hundreds of thousands of people (and counting)
  • Join a community of high achievers who have a passion for promoting mental health
• Path to develop & grow:
  • Bi-annual performance reviews & opportunities for promotions - as Cerebral grows, so should you. We build your goals together and forge a career path that is right for you
• Remote-first model: Work virtually from anywhere in the US
• Competitive compensation & benefits:
  • Total compensation includes annual bonus and equity / stock options
  • Medical, Dental, Vision, Life Insurance, HSA, Flexible Spending Accounts and 401(k)
  • Unlimited PTO - we encourage taking the time you need to relax and recharge
  • Wellness perks including monthly mental health days off (12 per year) in addition to holidays, and “No Meeting Wednesdays”
  • Up to $200 reimbursement for any equipment purchased to support your work-from-home environment (video camera, ring light, headset, etc.)
  • Access to free Cerebral therapy services (up to 7 sessions per year)
  • Medical travel expense health reimbursement arrangement 
  • Paid parental leave after 3 months
• Culture & connectivity:
  • Monthly peer-to-peer recognition allowance via Bonusly allows team members to reward one another for values-aligned contributions 
  • Employee Resource Groups that bring team members together in a safe space to connect with one another and advance a respectful and inclusive company culture
  • Virtual social events enable us to build a sense of community and connect on a more personal level
  • Optional in-person local meetups for major hub cities