Logo for Bicycle Health

Director, Information Security

Roles & Responsibilities

  • 10+ years in Information Security with direct leadership of at least one HITRUST CSF or SOC 2 Type II (healthcare-focused) certification program.
  • Expert-level HIPAA knowledge with working understanding of 42 CFR Part 2; experience managing privacy nuances of controlled-substance prescribing is a plus.
  • Experience building programs in Series C+ startups to enterprise scale, capable of balancing rapid growth with operational stability.
  • Strong AppSec (SaaS security) and SecOps (cloud defense) background; ability to speak code with engineers and risk with the Board; relevant certifications such as CISSP, CISM, or CCSFP are desirable.

Requirements:

  • Architect and mature the enterprise information security posture during a pivotal growth stage, building the team, processes, and technical controls to protect highly sensitive patient data while navigating HIPAA and 42 CFR Part 2.
  • Own the 12-24 month roadmap to achieve HITRUST Certification, ensuring that security practices are measurable, auditable, and scalable.
  • Lead AppSec and SecOps initiatives and balance rigorous engineering with disciplined governance to support scalable, enterprise-grade security.
  • Drive cross-department collaboration and communicate security goals to remote teams and the executive board, building a culture of security and regulatory compliance.

Job description

The Opioid Epidemic is a public health crisis with a highly effective but underutilized clinical intervention - millions of Americans are physically dependent on Opioids but only 10% of those likely to have OUD actually access treatment. Bicycle Health addresses this gap by maximizing accessibility, affordability, and overall quality of care by enabling highly qualified clinicians to reach patients broadly and efficiently through our online platform.

As the Director, Information Security, you will be the architect of our enterprise security posture during a pivotal stage of our growth. With tens of millions of dollars in revenue and at a growth stage, we are transitioning from "startup security" to an enterprise-grade program. Ultimately the goal of this role is make our Information Security, Trust & Compliance practices a competitive differentiator for Bicycle Health

Your primary mission is to build the team, processes, and technical controls required to protect our highly sensitive patient data while navigating the intersection of HIPAA and 42 CFR Part 2. You will own the 12–24 month roadmap to achieve HITRUST Certification, ensuring that our security practices are not only effective but are measurable, auditable, and scalable. This is a role for a builder who understands that true security in healthcare requires a balance of rigorous engineering (AppSec/SecOps) and disciplined governance.

Location: Remote

Schedule: Full time (40 hrs) - Monday-Friday, normal business hours

Target Pay Range: $175,000-$200,000 + equity - Compensation to be determined by the education, experience, knowledge, skills, and abilities of the applicant, internal equity, and alignment with market data. 

Benefits: 

  • Discretionary PTO + 8.5 days of additional sick time + 10 paid holidays
  • Paid parental leave
  • 100% Employer Paid Employee Medical, Dental, and Vision Insurance
  • Employer Paid STD & LTD
  • 401k
  • $50 monthly Remote Work Stipend

What we are looking for:

  • Proven Audit Success: 10+ years in Information Security, with direct experience leading at least one organization through a successful HITRUST CSF or SOC2 Type II (healthcare focus) certification.
  • Healthcare Regulatory Expertise: Expert-level knowledge of HIPAA and a working understanding of 42 CFR Part 2. Experience managing the privacy nuances of controlled substance prescribing is a significant plus.
  • Startup-to-Enterprise Growth: Experience in a Series C+ environment, with the ability to build programs from the ground up while maintaining operational stability.
  • Technical Breadth: A strong background in both AppSec (securing SaaS products) and SecOps (defending cloud infrastructure). You should be comfortable speaking "code" with engineers and "risk" with the Board.
  • Leadership Persona: Exceptional communication skills with the ability to influence remote teams and drive cross-departmental initiatives.

Certifications: CISSP, CISM, or CCSFP (Certified CSF Practitioner) are highly desirable.

This is a full-time (40hrs per week) remote position.

#LIRemote #zr #director

Recruitment Scam Notice

We are aware of fraudulent recruiting messages circulating that claim to represent our company. Please note:

  • All official communication from our recruiting team will come from an @bicyclehealth.com email address.

  • We will never ask you to pay fees, purchase equipment, or provide financial information as part of our hiring process.

  • We will never request your Social Security number or banking information before an offer of employment is made.

  • We only conduct interviews through legitimate, scheduled channels and will never make job offers via text message or chat apps.

If you believe you have been contacted by someone misrepresenting our company, please report it to careers@bicyclehealth.com.

 

About Bicycle Health:

Bicycle Health is a telemedicine group that specializes in the evidence-based treatment of individuals with Opioid Use Disorder using buprenorphine. We’ve grown our clinical staff of medical providers caring for patients, across 32 states, and we employ a large ancillary staff for support with technologic and administrative needs, clinical and behavioral support, and care coordination. Our innovative model has achieved clinical outcomes that exceed expectations for standard-of-care in-person treatment nationally. Our mission is to increase access to high quality, affordable, convenient and confidential Opioid Use Disorder treatment for all.

Bicycle Health is an Equal Opportunity Employer and considers applicants for employment without regard to race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or any other basis forbidden under federal, state, or local law. 

Related jobs

Other jobs at Bicycle Health

We help you get seen. Not ignored.

We help you get seen faster — by the right people.

🚀

Auto-Apply

We apply for you — automatically and instantly.

Save time, skip forms, and stay on top of every opportunity. Because you can't get seen if you're not in the race.

AI Match Feedback

Know your real match before you apply.

Get a detailed AI assessment of your profile against each job posting. Because getting seen starts with passing the filters.

Upgrade to Premium. Apply smarter and get noticed.

Upgrade to Premium

Join thousands of professionals who got noticed and hired faster.