Sr Mgr Product Information Security

Healthcare's helping hand.

CHG shook things up in 1979 by inventing the locum tenens staffing model.

We connect doctors with patients who need their care.

As the largest physician staffing firm in America, our providers treat millions of patients each year.

Our industry is growing and demand is high.

This means you'll have plenty of opportunities to grow and develop in your career.

Keeping healthcare healthy can be as fun as it is rewarding

The Product Information Security Leader will drive the security strategy and implementation across the enterprise, with a primary focus on application security and cloud infrastructure security.

This role combines technical expertise with leadership skills to ensure the secure development and deployment of our products while enabling innovation and business growth.

Responsibilities:


* Lead the design and implementation of the application security program, including security requirements, threat modeling, and secure development practices


* Establish and maintain secure coding standards, security testing frameworks, and vulnerability management processes


* Drive security assessments and penetration testing initiatives for enterprise products


* Collaborate with development teams to integrate security throughout the SDLC


* Implement and maintain application security tools and automation


* Collaborate with cloud engineers on cloud security architecture standards and best practices


* Collaborate and partner with DevOps teams to implement secure CI/CD pipelines


* Collaborate in maintaining security documentation and artifacts for compliance requirements


* Participate and lead regular risk assessments and develop mitigation strategies for enterprise products

Qualifications:


* Build and lead a team of product security engineers


* Develop and maintain security roadmaps aligned with product and business objectives


* Partner with Product Management to balance security requirements with product features


* Establish security metrics and KPIs to measure program effectiveness


* Present security status and risks to executive leadership


* Manage security budget and resource allocation

Education & Years of Experience


* 10+ years of information security experience with 5+ years focusing on application security


* Extensive experience with cloud platforms (AWS, Azure, GCP) and their security features


* Deep understanding of secure software development practices and SDLC


* Strong knowledge of security frameworks (OWASP, NIST, CIS)


* Experience with container security and microservices architecture


* Proven track record of building and leading security teams


* Excellent communication skills with ability to influence technical and non-technical stakeholders

Preferred Skills:


* Application Security Testing Tools (SAST, DAST, SCA)


* Cloud Security Tools and Services


* Container Security (Docker, Kubernet...