SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Aidoc is the market leader in healthcare AI, having developed the world's largest clinical frontier model supporting nearly 50 million patients annually. Deployed across 2,000+ medical centers globally, Aidoc has raised over $500 million since 2016 and holds a record number of FDA-cleared solutions.
The Director of IT Security leads Aidoc's corporate IT security function, overseeing day-to-day operations and continuous improvement of security controls across the organization. This role operates within IT strategy, budget, and governance frameworks, escalating strategic decisions to IT leadership.
Key responsibilities include:
- Leading and executing the corporate IT security roadmap and operating plan, formulating procedures and standards in collaboration with the Director of IT
- Managing the IT Security team (starting with a Security Engineer) and supporting function growth
- Implementing and improving security controls across identity and access management, endpoint security, DLP, SaaS, AI tools, and corporate systems
- Owning the corporate vulnerability-management lifecycle, including risk-based prioritization and remediation tracking
- Leading assessment and approval processes for internal SaaS and AI tools
- Defining IT Security requirements for suppliers, vendors, and third parties
- Maintaining security monitoring, technical enforcement, and audit evidence
- Leading corporate cyber-resilience activities including business continuity and disaster recovery
- Supporting incident response for corporate IT Security events
- Providing subject-matter expertise for audits, customer security requests, and compliance activities
The role protects Aidoc's identities, endpoints, SaaS and AI environments, corporate systems, suppliers, and information assets, partnering with IT, Operations, R&D, Security, Compliance, Legal, and business stakeholders.
Required qualifications include an undergraduate degree and/or relevant experience in Information Security, IT, or Computer Science, plus at least 8 years in IT Security or related fields. Candidates should have experience leading corporate security programs across identity management, endpoint security, SaaS, cloud, and data protection; managing security controls and vulnerability remediation; SaaS and AI security assessments; and managing or mentoring security professionals. Familiarity with ISO 27001, SOC 2, NIST CSF, GDPR, HIPAA, and experience with BCP/DR and ransomware preparedness are expected. Excellent English communication skills and ability to work independently with strong analytical and risk-assessment capabilities are essential.
