Job Opportunities API

We’re Doctify Doctify is the global platform built by doctors for doctors, on a mission to build the largest, most trusted global network of validated healthcare providers and experts. We connect patients with the right doctors, and doctors with respected peers, to ensure better care worldwide. Through verified patient reviews and professional skill endorsements, Doctify creates unmatched credibility for providers and empowers patients to choose care with confidence. Founded in 2015 and backed by $30m+ in funding, Doctify operates across 7 countries. We are uniting the global healthcare community, one trusted connection at a time. We do things differently here at Doctify, we are boldly leading a digital revolution in healthcare and are confident in our mission. About The Role Security is foundational to the trust that patients place in our platform and the confidence that healthcare providers invest in their professional reputations. We process sensitive healthcare data across seven countries, operate a complex cloud-native platform, and serve a rapidly growing community of patients and clinicians. Getting security right matters deeply. We’ve built solid and safe foundations; our cloud infrastructure, identity management, and application security are genuinely secure. Now we’re looking for a Cyber Security Lead to own security across the organisation, close the gaps that remain, and set us on a clear trajectory toward best-in-class security posture. This role is for a hands-on leader with the vision and ambition to grow into a CISO as Doctify continues to scale. You’ll work closely with the COO on operational security priorities, partner with the VP Engineering on technical architecture and DevSecOps, and engage the full business on security culture. Depending on your approach and the business’s needs, you may lead a small internal team (DevSecOps and/or IT/endpoint) and/or manage outsourced security partners. You’ll be responsible for Leadership, and ownership of security strategy & roadmap: Owning and delivering a comprehensive, prioritised security plan; translating Doctify's risk profile into a clear programme of work that takes us from our current foundations towards best-in-class maturity, and reporting progress to executive and board level. Endpoint security & device management: Designing and implementing enterprise-grade endpoint protection across all corporate devices; including EDR, mobile device management, patch management, and device trust controls, and balancing security rigour with a practical, user-friendly approach. Security operations & visibility: Building out Doctify's security operations capability: integrating SIEM, centralising security event logging, and establishing an active security review process, whether through an internal function or a managed SOC partner. Cloud & platform security: Owning and continuously improving the security of our AWS and Google Workspace environments, applying CIS benchmarks and industry frameworks, and ensuring our cloud posture keeps pace with the platform's growth. Application & data security architecture: Partnering with the VP Engineering and engineering teams to embed security into the SDLC, from threat modelling and code review standards to secure data handling practices that protect the sensitive patient and clinician information we steward. Governance, risk & compliance: Maturing Doctify's security governance framework, maintaining Cyber Essentials certification, formalising risk management methodology, managing the risk register, and driving us towards ISO 27001 or equivalent. Identity & access management: Strengthening IAM across the organisation, improving SSO centralisation, access controls, and privileged access management to protect both internal systems and our patient and doctor-facing products. Security awareness & culture: Championing security across the whole busi