Chief Information Security Officer

Company Description Cohera Health is a healthcare technology company focused on delivering secure, innovative solutions that improve clinical workflows and patient outcomes. The organization emphasizes data privacy, reliability, and resilience in all products and services, supporting healthcare organizations in managing sensitive clinical and operational information. Cohera Health values collaboration, integrity, and continuous improvement, fostering an environment where technology and healthcare expertise intersect. Team members work across disciplines to build scalable, compliant solutions that align with industry standards and evolving regulatory requirements.
Role Description The Chief Information Security Officer (CISO) is a full-time, remote role responsible for defining and leading Cohera Health’s information security strategy across all systems, applications, and data assets. In this role, the CISO oversees the development, implementation, and continuous improvement of security policies, standards, and controls, ensuring compliance with healthcare and data protection regulations. Day-to-day responsibilities include managing cybersecurity operations, monitoring threats and vulnerabilities, directing incident response activities, and coordinating risk assessments across the organization. The CISO collaborates closely with executive leadership, technology, product, and operations teams to integrate security into product design, infrastructure, and business processes. This role also includes leading security awareness initiatives, vendor and third-party security reviews, and business continuity planning to maintain a resilient and secure environment.
Qualifications
Candidates should possess strong Information Security and Information Security Management skills, including governance, risk management, and policy development.
Candidates should possess robust Cybersecurity skills, including threat detection, incident response, vulnerability management, and security operations.
Candidates should possess Application Security skills focused on secure software development practices, code review, and protection of cloud-based and on-premises applications.
Candidates should possess Business Continuity expertise, including disaster recovery planning, resiliency strategies, and continuity of critical healthcare services.
Relevant skills such as familiarity with healthcare regulations (e.g., HIPAA), data privacy standards, and industry frameworks (e.g., NIST, ISO 27001) are highly beneficial.
Demonstrated experience in a senior information security leadership role, preferably within healthcare or highly regulated industries.
Strong communication and collaboration skills, with the ability to influence stakeholders and present complex security topics to technical and non-technical audiences.
Advanced degree or professional certifications (e.g., CISSP, CISM, CISA, CCSP) are preferred but not required, depending on experience and demonstrated expertise.

Work arrangement
Yes