Job Opportunities API

Habitat Health empowers older adults to experience more good days in their homes and communities. Through the Program of All-Inclusive Care for the Elderly (PACE), we provide comprehensive medical care along with support for daily needs such as meals, transportation, and in ‑ home assistance. We deliver coordinated clinical and social care in our centers and directly in participants’ homes, creating a fully integrated experience that brings peace of mind and a true sense of belonging. As we expand our scalable, affordable PACE model to meet the growing and complex needs of aging populations, our mission ‑ driven care teams continue to help participants live well on their own terms.   Habitat Health is supported by leading healthcare organizations and investors including New Enterprise Associates, Kaiser Permanente, and Town Hall Ventures. We are entering a period of significant growth and are looking for exceptional teammates to help us scale a better model of care for older adults. To learn more, visit www.habitathealth.com. We are looking for a qualified, hands-on Information Security Manager to design, implement, and operate the information security program for our growing healthcare organization operating under the PACE model.  This role blends strategic security leadership with practical execution. The ideal candidate can translate high regulatory and partner security standards into right-sized, pragmatic controls, while building sustainable governance, oversight, and audit processes.   Deploy HIPAA aligned best practice security architecture across our Microsoft 365 environment and Meraki based WAN   Define, implement, and maintain administrative, technical, and physical security controls appropriate for a PACE organization Own security design decisions and control selection, balancing risk, regulatory requirements, and operational realities   Security monitoring and incident response: configure and monitor tools, logs, and alerts, analyze activity, and investigate potential security incidents   Serve as primary security escalation point for internal teams and external partners Lead incident response planning, tabletop exercises, post-incident reviews, and remediation tracking   Perform vulnerability management activities, based on internal and external scans, and coordinate remediation activities   Maintain an enterprise security risk register, including risk scoring, mitigation plans, and executive-level reporting   Support business continuity and disaster recovery security requirements in partnership with IT and Operations   Lead Access and Identify management, developing best practice procedures, and enabling others to work within these processes   Oversee privileged access, role-based access controls, joiner/mover/leaver processes, and periodic access reviews   Ensure appropriate data protection controls for PHI, including encryption, logging, and monitoring   Draft, maintain, and enforce security policies, standards, and procedures aligned to HIPAA, NIST, and partner requirement   Design and operate recurring security oversight and audit processes, including evidence collection and remediation tracking   Lead and coordinate internal and external security audits, assessments, and partner security reviews   Establish and manage a third-party security and risk management program, including vendor risk assessments and ongoing monitoring   Partner closely with IT, Compliance, Legal, Clinical, and Operations teams to embed security into daily workflows Qualifications:    Bachelor’s degree in Computer Science with an emphasis on Information Security, or equivalent experience. 7+ years of progressive experience in information