HireMO

Overview

_Help at Home is the leading national provider of in-home personal care services, where our mission is to enable individuals to live with independence and dignity at home. Our team supports 66,000 clients monthly with the help of 50,000 compassionate caregivers across 12 states. We're looking for people who care about others, who are willing to listen, lean in and make impactful change. Each role at Help at Home can have a positive impact in supporting our caregivers and clients. If you are someone who leads with passion and integrity and are looking to join a rapidly growing, industry leading team, Help at Home may be a good fit for you._

The Head of Information Security is responsible for leading and advancing Help at Home's enterprise-wide information security program. This hands-on leadership role oversees security operations, cybersecurity strategy execution, risk management, and regulatory compliance initiatives to protect company systems, data, and business operations. The Head of Information Security partners closely with Information Technology, Finance, Legal, Compliance, Privacy, Procurement, Internal Audit, and senior business leaders to strengthen security controls, enhance organizational resilience, and foster a culture of security awareness. This position serves as a trusted advisor to executive leadership, providing strategic guidance on emerging threats, risk mitigation, and the continued maturity of the organization's cybersecurity program.

Our Benefits:

+ Comprehensive medical, dental, and vision coverage

+ 401(k) retirement plan

+ Paid time off and holidays

+ Employee assistance programs and wellness initiatives

+ Flexible options to support a balanced life

Responsibilities

_Essential Duties and Responsibilities:_

+ Program Leadership

+ Own execution of the enterprise security strategy and roadmap, translating strategic direction into operating plans, priorities, and measurable outcomes.

+ Lead and operate the day-to-day security program, including governance, risk management, security operations, and program metrics.

+ Establish and maintain meaningful security metrics, key risk indicators, and reporting to support decision-making and transparency.

+ Monitor emerging threats, legislation, and industry developments; assess risk exposure and drive timely mitigation.

+ Security Operations and Team Leadership

+ Own day-to-day security operations, including monitoring and detection, vulnerability management, security engineering, and incident response.

+ Lead, hire, and develop the security team, including resource planning, coaching, and prioritization of work against business-critical objectives.

+ Manage relationships with MSSPs, tooling partners, and other third-party security providers and ensure vendor performance meets expectations.

+ Oversee identity and access management, cloud security, application security, and data protection programs.

+ Ensure security participation in the software development lifecycle and embed security requirements into products, platforms, and vendor relationships.

+ Policy and AI Governance

+ Maintain and update security policies, standards, and procedures, including policies governing the responsible use of AI.

+ Participate in enterprise AI governance, partnering with IT, Legal, Compliance, and business leaders to assess AI use cases, define acceptable use, and manage data, model, and third-party AI risk.

+ SOX, Audit, and Compliance

+ Partner with Finance, IT, and Internal Audit to remediate material weaknesses and strengthen IT general controls, including access management and change management.

+ Own the security-related control environment and evidence and support internal and external audit, certification, and customer assurance activities.

+ Ensure alignment with applicable regulatory requirements, including HIPAA and SOX, and recognized frameworks such as NIST CSF, ISO 27001, SOC 2, or CIS Controls.

+ Cyber Resilience and Business Continuity

+ Lead business continuity planning (BCP) and disaster recovery alignment, working directly with business stakeholders to define critical processes, recovery objectives, and response plans.

+ Lead incident response and crisis management readiness, including tabletop exercises and post-incident improvement.

+ Risk and Third-Party Management

+ Support enterprise cyber risk management, including risk identification, assessment, mitigation, and monitoring.

+ Oversee third-party and vendor security risk assessments.

+ Support security due diligence for mergers, acquisitions, and integrations.

+ Stakeholder and Leadership Communication

+ Act as a trusted security resource for business and technology leaders, translating technical risk into clear, practical recommendations.

+ Prepare and help present security materials for executive leadership and, as needed, the Board.

+ Build working relationships with regulators, industry groups, and external security partners as needed.

+ Lead cybersecurity awareness, education, and culture initiatives across the enterprise.

Qualifications

_Required Skills/Abilities:_

+ Strong business acumen and the ability to frame information security as a business issue.

+ Hands-on leadership style with strong technical depth.

+ Ability to lead a team through rapid change and competing priorities.

+ Ability to influence others where there is no direct authority.

+ Ability to propose creative, practical solutions to security-specific business problems.

+ Proven record of meeting operational objectives and earning the respect of the organization through results.

+ Ability to translate cyber risk and technical concepts into clear recommendations for business and technology leaders.

+ Strong communication skills with technical and non-technical audiences.

+ Demonstrated ownership, accountability, teamwork, and cross-functional collaboration.

_Security Responsibilities_

All employees must follow Help at Home cybersecurity and privacy policies, protect sensitive data, complete required training, and report suspected incidents. They must also follow acceptable use and access requirements and use only authorized systems.

_Education and Experience:_

+ Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent relevant experience required.

+ 12+ years of experience in information security, including 3+ years leading security teams, programs, or cross-functional security initiatives required.

+ Hands-on experience running security operations, including incident response and vulnerability management, and managing MSSP or vendor partners required.

+ Experience remediating SOX / ITGC control deficiencies or material weaknesses required.

+ Experience developing and running BCP/DR prog...

Apply Externally

Jobs

Head of Information Security

Summary

You Need a MO Jobs Account First

Jobs

Jobs

Head of Information Security

Summary

Do You Have a MO Jobs Account?

First, Let's Find Your MO Jobs Account

Create an Account to Apply

You Need a MO Jobs Account First

HireMO Terms of Use

1. Acceptance and Changes

2. A No-Cost Public Workforce Service

3. Eligibility, Youth, and Authority

4. Accounts and Security

5. Accuracy Attestation and Program Information

6. Job Seeker Terms

7. Employer Terms

8. Assessments and Matching

9. Artificial Intelligence Features

10. Public Records and Required Notices

11. User Content and Permissions

12. Acceptable Use

13. Intellectual Property and Government Marks

14. Other Users and Third-Party Services

15. Electronic Communications

16. Suspension, Termination, and Records

17. Disclaimers

18. Limitation of Liability and Sovereign Immunity

19. Employer Indemnification

20. Governing Law and General Terms

21. Contact, Accessibility, and Complaints