Director, Cloud Security
$184,000–$240,000 year
Remote · United States or New York City, New York, United States
Job Summary
Director of Cloud Security, reporting to the CISO, responsible for leading Judi Health’s cloud security strategy and engineering across AWS, with emphasis on FedRAMP readiness, zero-trust architecture, cloud hardening, and security automation at scale. Partners with engineering, infrastructure, compliance, and AI teams to embed secure-by-design practices, mature IAM and access controls, and governance for AI initiatives. Oversees design and implementation of cloud security controls across AWS infrastructure, IaC, and supporting services; drives threat detection, incident response readiness, vulnerability management, and security validation; aligns security investments with regulatory commitments (FedRAMP, FISMA, SOC 2, HITRUST, HIPAA) and platform resilience goals; establishes security metrics and communicates progress to leadership. Leads a high-performing cloud security engineering function, mentoring and scaling the team, and defines a practical security framework that enables AI initiatives while managing risk.
Required Qualifications
- 10+ years of experience in cloud security, information security, or related field, including 5+ years in leadership roles
- Proven experience leading cloud security or security engineering programs, including team leadership, roadmap execution, and cross-functional influence
- Deep expertise in AWS security architecture, cloud-native security controls, and modern practices for securing scalable SaaS environments
- Strong technical depth in at least one modern programming or scripting language, with experience enabling secure engineering and automation in cloud environments
- Hands-on experience securing infrastructure as code and cloud deployment pipelines, including Terraform and CI/CD environments
- Expertise with security tooling and operational disciplines such as SIEM, cloud security posture management, vulnerability management, detection engineering, and incident response
- Experience supporting regulated or audited environments, including technical control implementation, evidence management, and readiness for external assessments
- Experience partnering with engineering or product teams to define security guardrails and governance for emerging technologies, including AI-enabled initiatives
- Strong understanding of identity and access management, least privilege, authentication, privileged access, and zero trust principles
- Excellent communication and stakeholder management skills, with the ability to translate complex security priorities into clear decisions and practical outcomes
- Ability to operate effectively in a fast-paced, high-growth environment while balancing strategic priorities with hands-on execution
Apply with one swipe on Sorce. We auto-fill applications and apply on your behalf — no cover letters, no 40-minute forms.
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.