CISO & Head of IT

Join Cureety, a digital health company focused on supporting people living with cancer. As the CISO & Head of IT, you will lead information security and oversee corporate IT operations. Your responsibilities will include risk management, strengthening operational security, incident preparedness, embedding security into everyday work, overseeing corporate IT and third parties, and demonstrating the effectiveness of the security program. You will work closely with Legal, Privacy, and Quality to protect sensitive data in a regulated healthcare environment.

About Cureety

A tangible purpose: protecting the data and services used by patients and healthcare professionals.

Responsibilities

• Lead security and risk management by identifying key risks, defining the security roadmap, and driving treatment plans.
• Strengthen operational security by coordinating security testing, verifying remediation effectiveness, and agreeing on appropriate protections for cloud and SaaS environments.
• Prepare for incidents and build resilience by leading incident preparedness and response coordination, organizing security and business continuity exercises, and turning lessons learned into improvements.
• Ownership of information security, with direct access to executive leadership to present recommendations and secure decisions.

Requirements

• You have already led an information security program and delivered tangible improvements to an organization’s security. You can move from assessing a risk to working through its resolution with technical teams.
• Solid experience in security risk management and delivering security improvements.
• The technical understanding to challenge security controls across cloud infrastructure, identities, access and data protection.
• Strong working knowledge of ISO 27001 and information security management systems.
• The ability to manage partners and bring technical and business teams together.
• At least one relevant certification: CISM, CISSP, ISO 27001 Lead Implementer / Lead Auditor, or an equivalent credential.
• Fluent professional English, both spoken and written.
• Experience with SOC 2 and/or HIPAA, outsourced IT providers, or SaaS, healthcare or medical device environments would be an advantage.
• You can prioritize, make a clear case for your recommendations and propose measures proportionate to the risks. You enjoy building structure while staying directly involved in solving practical problems with teams.

Benefits

• An international program to shape, working with European and US teams during a key period of integration and growth.