As Risk Assurance Manager, you will implement Capricorn's risk and compliance strategy, ensuring sound decision-making and overseeing risk profiles while leading assurance reviews and reporting.
Senior Information Security Manager (GRC Focus)
📜 Description
- Lead compliance and certification efforts across SOC 2, ISO 27001, ISO 42001, HIPAA, GDPR, and CIS benchmarks.
- Serve as the primary contact for internal and external security questions and respond to customer security questionnaires.
- Oversee SOC operations, including log coverage, detection rules, and SLA/KPI management.
- Build and manage third-party risk, business continuity, and disaster recovery programs; maintain vendor risk and the security risk register.
- Coordinate vulnerability management, monitor the external attack surface, and lead security incident response as incident commander.
- Own security awareness, policies, the Trust Center, onboarding and offboarding audits, and the annual security roadmap.
🛠️ Requirements
- 5+ years of experience in information security, with meaningful time in GRC, security operations, or a hybrid role
- Hands-on experience leading or supporting SOC 2, ISO 27001, HIPAA, and GDPR certifications and audits
- Strong understanding of SOC operations, SIEM tooling, detection engineering concepts, and incident response
- Experience building or running a Third-Party Risk Management program
- Experience acting as incident commander or lead responder for security incidents
- Familiarity with vulnerability management programs across cloud and corporate environments
- Strong written and verbal communication skills in English, able to represent security to customers, auditors, and executives
✨ Benefits
- Competitive cash compensation
- Equity
- Medical insurance
- Dental insurance
- Vision insurance
- 401(k)
- Generous vacation
- Performance-based bonuses
Full job description
About Viz.ai
Viz.ai is the leader in building and deploying AI-powered Care Pathways and helping doctors do their work. The Viz Platform is deployed in 2,000 hospitals across the United States and trusted by many of the leading life sciences companies. The platform uniquely combines real-time, multimodal clinical data with deep clinician engagement to detect disease earlier, coordinate care teams, and help ensure patients receive the right treatment faster. Viz.ai was the first company to be awarded CMS reimbursement for AI and is ranked the #1 Healthcare AI Platform by hospitals and health systems in the Black Book Research survey. For more information, visit Viz.ai.
We are growing and are looking for a Senior Information Security Manager (GRC focus) JD to join our mission to increase access to life-saving treatments.
The Role:
Lead and maintain all certification and compliance efforts, including SOC 2, ISO 27001, ISO 42001, HIPAA, GDPR, and CIS benchmarks
Serve as the primary point of contact for all security questions and concerns, internal and external
Own global security awareness strategy and programs, including annual employee training, ongoing awareness campaigns, and phishing simulations
Respond to customer and prospect security questionnaires while maintaining agreed turnaround times
Oversee SOC (Security Operations Center) operations, including log source coverage, detection rule creation and tuning, and SLA/KPI management
Build and manage the Third-Party Risk Management, Business Continuity, and Disaster Recovery programs
Run the vulnerability steering committee across corporate and production environments
Manage vendor risk and the security risk register
Monitor and manage the company's external digital footprint using third-party attack surface management tools
Act as incident commander for security incidents — analyze, escalate, coordinate response, and drive remediation
Help design and execute the annual security roadmap
Manage the company Trust Center
Lead the internal security policy lifecycle — creation, updates, approvals, and distribution
Audit onboarding and offboarding processes from a security perspective
Champion Viz values in every aspect of IT — "I'm Accountable," "Kindness Wins," "Quality Squared," and "Time is Brain."
What you will love working at Viz.ai::
Seeing your work translated to #'s of lives saved
You have experience delivering mission-critical, real-world systems
You love Interacting with great people who are open and fun to hang out with
Working with world-class people, who have previously taken startups from start to exit - this may be the place for you!
Requirements:
5+ years of experience in information security, with meaningful time in GRC, security operations, or a hybrid role
Hands-on experience leading or supporting SOC 2, ISO 27001, HIPAA, and GDPR certifications and audits
Strong understanding of SOC operations, SIEM tooling, detection engineering concepts, and incident response
Experience building or running a Third-Party Risk Management program
Experience acting as incident commander or lead responder for security incidents
Familiarity with vulnerability management programs across cloud and corporate environments
Strong written and verbal communication skills in English, able to represent security to customers, auditors, and executives
Why should you join us?
If you are looking to make an impact, we are mission-driven and are making a difference in peoples’ lives every day.
If you want to be a part of an amazing team , our people are the heart of everything we do.
If you are a self-starter and naturally motivated, our work is driven by curiosity, innovation and team collaboration which allows us to leverage our skills immeasurably.
We are a remote-first company across the U.S. and EU, with a team in Tel Aviv operating in a flexible hybrid model, conveniently located near a train line.
Viz.ai is committed to providing highly competitive cash compensation, equity, and benefits. The compensation offered for this role will be based on multiple factors such as location, the role’s scope and complexity, and the candidate’s experience and expertise, and may vary from the range provided.
In the U.S., Viz offers competitive benefits, including medical, dental, vision, 401(k), generous vacation, and additional benefits to full-time employees. Viz.ai is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics, or any other basis prohibited by federal, state, or local law.
Employees in Israel are offered a comprehensive benefits package, including, among others: dental insurance, performance-based bonuses, a Cibus meal allowance, meals at the office, and more.
If you’re applying for a position in San Francisco, please review the San Francisco Fair Chance Ordinance guidelines applicable in your area.
#LI: GH1
#LI: remote
Similar jobs
Search more Manager jobsField Reimburesement Manager - Pennsylvania
Develops community access strategies for biopharma therapies, guides providers through reimbursement and authorization processes, manages pharmacy and support programs, and improves patient access in collaboration with healthcare.
Field Reimbursement Manager - Michigan
The Field Reimbursement Manager develops access strategies, guides providers through reimbursement and authorization processes, and manages pharmacy and community support programs to improve patient access to therapies.
Senior IT Project Manager (within Life Sciences)
Lead complex IT projects in the Pharma and Life Sciences sector, ensuring successful outcomes by managing scope, quality, budget, and stakeholder relationships.
Own the Group’s technical tax position across the Philippines, Singapore, and Abu Dhabi, leading compliance, cross-border tax advice, transfer pricing documentation, and tax authority audit defense.
