# Information Security Lead

**Company:** [Click Therapeutics](https://hotfix.jobs/companies/click-therapeutics)
**Location:** New York, NY, Boston, MA
**Role:** Security Engineering
**Salary:** $130k – $200k/yr
**Experience:** 5+ years
**Skills:** information security management system, ISO 27001, SOC 2, nist cybersecurity framework, SIEM, edr, Threat Modeling, AWS, Application Security, Penetration Testing, vulnerability scanning, HIPAA, GDPR, CCPA, secure development lifecycle
**Posted:** 2026-07-31

> Leads information security operations, compliance, risk management, and secure development for regulated digital therapeutics. The role requires healthcare or medical-device security experience, expertise with major security frameworks and cloud/application security, and the ability to lead cross-functional teams.

## Job Description

## Responsibilities

- Maintain and continually improve the Information Security Management System (ISMS) to support certifications including ISO 27001, SOC 2, IEC 81001-5-1, and UK Cyber Essentials Plus.
- Lead technical security aspects of data privacy and compliance with GDPR, CCPA, and HIPAA.
- Lead and mature Security Operations Center (SOC) capabilities, including threat intelligence, monitoring, detection, and analysis.
- Collect, analyze, escalate, and respond to cybersecurity vulnerabilities, threats, and attacks using SIEM and EDR technologies.
- Collaborate with Engineering on Secure Development Lifecycle (SDLC) practices, including threat modeling, static and dynamic analysis, fuzz testing, and formal verification.
- Develop and maintain reporting for threat and incident KPIs, including incident response timeliness and observability metrics.
- Oversee penetration testing and vulnerability scanning.
- Conduct security training and awareness programs.
- Oversee third-party and vendor risk management activities.
- Collaborate with Quality and Regulatory teams on cybersecurity processes.
- Support regulatory submissions by generating Cybersecurity Quality Management System (QMS) documentation and ensuring compliance with FDA Cybersecurity Guidance (2025), EU MDR, NIST 800-53, IMDRF, and AAMI TIR57.

## Requirements

- Experience in a highly regulated industry such as medical devices, pharmaceuticals, biotechnology, or healthcare.
- Understanding of security frameworks and standards, including NIST Cybersecurity Framework, ISO 27001/27002, and SOC 2.
- Knowledge of risk assessment methodologies, threat modeling, network security, AWS cloud security, application security, and data protection technologies.
- Experience leading or participating in formal security audits.
- Experience interfacing with engineering teams and working in tiger teams or embedded SME Scrum teams.
- Strong leadership and communication skills, including the ability to explain complex security concepts to technical and non-technical audiences.
- Ability to integrate AI technologies into professional workflows and use them to drive innovation and productivity.

## Compensation and Benefits

- Base salary: **$130,000–$200,000**.
- Annual performance-based cash bonus.
- Equity package and stock options.
- 5% 401(k) matching.
- Medical, dental, vision, and life insurance.
- Unlimited paid time off.
- Professional development stipend.
- Fitness reimbursement, commuter subsidies, fertility support, and parent benefits.
- Flexible work arrangement, with at least four days per week in the office.
- Additional benefits include Uber One, Nectar Rewards, One Medical, Bike Membership, LinkedIn Learning, Gemini Enterprise Stack, Industrious Workspaces, sponsored company events, office meals and snacks, and a choice of Mac or Windows.

## Similar roles

- [Senior Security Engineer](https://hotfix.jobs/jobs/58cd9f20-ffb4-4e16-a7d0-e1001914a55f) - Chainguard - Remote - $130k – $150k/yr
- [Senior Security Engineer](https://hotfix.jobs/jobs/99e2a151-a656-4094-818f-979ecc125b37) - Chime - New York, NY - $130k – $250k/yr
- [Senior Software Engineer, Server Security](https://hotfix.jobs/jobs/b4220420-4d9c-4513-9c61-8eac97487464) - MongoDB - New York, NY - $126k – $248k/yr
- [Senior Security Analyst, Customer Assurance](https://hotfix.jobs/jobs/157d6a84-eda7-4365-93ab-baf6b406c89f) - Plaid - New York, NY - $134k – $214k/yr
- [Senior Security Automation Engineer](https://hotfix.jobs/jobs/2e4e1230-924e-4c2c-8df4-cdee5ef22cdb) - Clickhouse - Remote - $125k – $205k/yr

**Apply:** https://hotfix.jobs/jobs/3f0c60c0-4452-4881-be5a-2005e56f41d5
**Canonical:** https://hotfix.jobs/jobs/3f0c60c0-4452-4881-be5a-2005e56f41d5