# Director, Information Security

**Company:** [WHOOP](https://hotfix.jobs/companies/whoop)
**Location:** Boston, MA
**Role:** Security Engineering
**Experience:** 10+ years
**Skills:** Security Engineering, Security Operations, Incident Response, SIEM, Automation, HIPAA, GDPR, PCI, Ai Security, Cissp
**Posted:** 2026-01-30

> Leads security engineering and operations team, managing detection/response, AI security posture, and regulatory compliance in a high-growth health tech environment. Requires 10+ years experience including 5+ years managing managers.

## Job Description

## Responsibilities
- Lead Information Security function, accountable for security engineering, day-to-day operations, and evolving operating model.
- Translate regulatory, privacy, and risk requirements into auditable technical controls, partnering with Security Architecture.
- Own security operations including detection, response, escalation, incident follow-up, and operational readiness; serve as Incident Commander.
- Establish standard operating procedures, metrics, automation, and process improvements.
- Own security posture for enterprise and internal AI technologies, including guardrails for access, data handling, and monitoring.
- Manage security managers and senior contributors, set expectations, and partner on hiring and development.
- Partner with GRC and Legal for audits and communicate risk posture to leadership.

## Qualifications
- 10+ years in information security, security engineering, or operations; 5+ years managing managers and senior contributors.
- Experience hiring, developing, and holding high-performing teams accountable.
- Proven leadership in high-impact security incidents.
- Experience with managed security service providers.
- Strong prioritization and execution in high-growth environments.
- Experience scaling security programs with metrics and automation.
- Familiarity with HIPAA, GDPR, PCI, and AI compliance.
- Preferred: Healthcare/biometric data experience, high-growth tech background, CISSP/CISM.

## Similar roles

- [Director, Information Security & Technology](https://hotfix.jobs/jobs/206a3607-4d09-42a8-8ff7-ff8d9b3096f3) - GameChanger - Remote - $220k – $240k/yr
- [Head of Security & Compliance](https://hotfix.jobs/jobs/0c31140a-05ba-40ab-a5aa-12713d69cde4) - Casca - San Francisco, CA - $200k – $255k/yr
- [Head of Security Engineering](https://hotfix.jobs/jobs/367726a8-59a8-46f7-b624-833e1365c048) - Harvey - San Francisco, CA - $285k – $350k/yr
- [Head of IT & Information Security](https://hotfix.jobs/jobs/f30c568f-e311-4782-97f6-8ec02f856c13) - Fable Security - Remote - $160k – $225k/yr
- [Privacy Engineering Director](https://hotfix.jobs/jobs/7a45a3ca-90d8-4d75-bac1-d9537bd8a64f) - DuckDuckGo - Remote - $244k – $244k/yr

**Apply:** https://hotfix.jobs/jobs/79722a51-fbf8-4891-8b0f-30db5fe2d743
**Canonical:** https://hotfix.jobs/jobs/79722a51-fbf8-4891-8b0f-30db5fe2d743