Director, Corporate Security

About Komodo Health

Komodo Health is dedicated to reducing the global impact of disease by leveraging advanced data analytics. Through the Healthcare Map, the most comprehensive and precise model of the U.S. healthcare system, Komodo combines de-identified patient data with innovative algorithms and clinical expertise to develop software that provides valuable insights into patient care and treatment trends.

The company culture revolves around being exceptional, striving for growth, delivering impressive outcomes, and enjoying the process. Joining Komodo means becoming part of a diverse, ambitious team passionate about improving healthcare globally.

Role Overview

We are looking for a Director of Corporate Security to evaluate and enhance the current security posture across internal systems, identity management, devices, networks, applications, vendors, and workforce security risks. This executive-level position reports to the CFO and requires collaboration with IT, product security, engineering, compliance, legal, and business teams to identify gaps, improve execution, and establish standardized security operations.

Key Responsibilities

• Lead corporate security strategy and execution covering identity and access management, endpoint and device security, SaaS security, data-sharing controls, workforce risk, and incident response.
• Develop and oversee a multi-year security roadmap aligned with risk priorities, business needs, and resources; report progress and risk posture to executives.
• Manage security operations including tools like EDR/MDR, email security, SIEM, and coordinate incident responses.
• Collaborate with IT to strengthen user provisioning and deprovisioning, access reviews, device management, and internal network and application controls.
• Implement robust governance for internal AI tools including access control, single sign-on, logging, retention, and approved usage standards.
• Work alongside product security, compliance, procurement, and legal teams on vendor security assessments, privacy considerations, and security requirements.
• Recruit, develop, and lead a high-performing security team, fostering accountability and excellence.
• Represent corporate security during audits, investor due diligence, customer reviews, and regulatory inquiries as necessary.

Required Experience & Skills

• Over 7 years in senior corporate security or IT security leadership roles with ownership of programs, teams, and executive stakeholder engagement.
• Experience working in both highly regulated or mature enterprise environments and rapid-growth startups, including building security programs from the ground up.
• Proven success managing security teams for at least 5 years and mature corporate security programs, particularly in startup or scaling contexts.
• Expertise in core corporate security domains such as identity and access management, device trust, endpoint security, network and SaaS security, incident response, and governance.
• Hands-on familiarity with enterprise security tools like SIEM, modern endpoint detection and response, email security platforms, identity and access management systems, and device management solutions.
• Experience managing security programs compliant with external audits including SOC 2 or similar frameworks, with auditor-ready policies and evidence management.
• Strong leadership across cross-functional teams including IT, engineering, compliance, legal, procurement, and HR, using influence effectively.
• Excellent communication skills to translate technical risks into business terms for CFOs, boards, and clients.
• Background in healthcare, life sciences, or sectors handling sensitive patient health and proprietary data.
• Proven ability to articulate risks, progress, and action plans clearly for diverse stakeholders and support audit and investigation processes.
• Decisive, calm, and disciplined execution under pressure with strong judgment and leadership presence.

AI Governance Responsibilities

• Lead secure adoption of enterprise AI tools by establishing governance policies such as single sign-on, access control, retention, and monitoring to minimize shadow IT.
• Develop enforceable data handling, logging, redaction, and access review standards for AI usage, and implement evaluation processes for new tools.
• Leverage AI to optimize security operations, documentation, risk evaluation, and incident response workflows, maintaining clear human responsibility.

Preferred Additional Experience

• Scaling security programs through late-stage venture rounds or toward IPO readiness, including investor diligence and SOC 2 Type II audits.
• Knowledge of Apple device management and managing mixed-device environments in enterprises.
• Experience with automation and security tooling to boost detection and response efficiency.
• Expertise in offboarding and access governance in organizations with extensive SaaS use.
• Skill in selecting and managing enterprise security vendors through procurement cycles.

Compensation and Benefits

The annual base salary for this position varies by location, ranging from $206,000 to $290,000 USD, with higher ranges applicable in the San Francisco Bay Area or New York City. The role may also qualify for performance bonuses and equity awards. Benefits include comprehensive health, dental, vision insurance, flexible time off and holidays, 401(k) matching, disability and life insurance, and leaves according to applicable laws and company policy.

Work Environment

Komodo Health operates a hybrid work model with hubs in San Francisco, New York City, and Chicago, while accommodating remote work. Expectations about onsite presence will be clearly communicated prior to joining.

Equal Opportunity

Komodo Health is an equal opportunity employer, committed to a discrimination-free workplace covering race, color, religion, age, sex, national origin, disability, veteran status, sexual orientation, gender identity, or any other protected category under applicable laws.