Director of Security, Data Protection - Aledade

As the Director for Data Protection, you will lead by being a highly technical leader who delivers high business impact on projects increasing dependencies and ambiguity.

You will lead a team of individual contributors focused on protecting patients, our employees, and Aledade as a whole. You will establish frameworks and processes to enable secure access to Aledade’s data, including PHI, PII, etc. You will work with cross-functional stakeholders and teams to establish standards, SOPs, runbooks to manage the end-to-end data lifecycle.

At Aledade, we empower primary care physicians with technology to keep their patients healthy, preventing unnecessary hospitalizations.

• Impact: Balance short and long-term business impact by developing strategies

to manage risks.

• People: Develop outstanding teams using a combination of world-class-hiring

and direct-timely-actionable feedback to develop security talent.

• Execution: Set aggressive yet clear goals and remove all roadblocks for the

team to achieve them.

• Collaboration: Develop strong relationships and work cross-functionally with

many partners across organizations and functions, and as a result, increase the

impact of the team’s work.

• Company: Work closely with company-wide leaders to drive excellence in our

processes and systems that protect patients, our employees, and Aledade as a

whole.

• BS (or higher) in Computer Science, Cybersecurity, Engineering, or equivalent experience

• 10+ years of experience in designing, building, or operating data protection services

• 7+ years of building and leading highly complex, technical security teams

• Developing and delivering a multi-year vision and strategy with incremental quarterly

• deliverables with cross-functional efforts that span multiple teams

• Demonstrated proficiency in attracting, hiring, and coaching world-class engineers and

• managers

• Demonstrated experience in taking ownership of the technology decisions, while delegating and

• empowering team members.

• Working knowledge of health-tech systems, like Electronic Health Records, Clinical data, etc.

Domain specific KSA’s:




Data Security:

Proven leadership experience in managing data protection solutions, such as data security posture management (DSPM), data loss prevention (DLP) systems, encryption technologies, and data masking / anonymization techniques.

Experience securing an ML, SaaS, or data-focused platform.

Experience in data governance, data engineering, and associated technologies.

Experience in cloud native application development and security models, particularly in AWS and Azure

Proficiency in SaaS Data Security, knowledge of secure cloud architecture design, cloud data protection mechanisms, and cloud identity and access management (IAM).

Programming and Scripting Experience (Python, PowerShell, Shell Scripting, Ruby, Go).

Experience with data protection and governance technologies, e.g., Data Discovery, Data Inventory/Catalogs, Certificate and Key Management, Database Encryption, and Database Activity Monitoring.

• Sitting for prolonged periods of time. Extensive use of computers and keyboard. Occasional walking and lifting may be required.