Information Security Officer

Job description

Description HITRUST is seeking an experienced Information Security Officer (ISO) to lead and continuously evolve our enterprise information security program in a cloud-first, Zero Trust environment . This role is accountable for protecting HITRUST’s information assets, supporting our assurance obligations, and enabling secure business growth. The Information Security Officer partners closely with Engineering leadership and business stakeholders to ensure security controls are risk-based, scalable, and aligned with modern cloud and SaaS architectures , while meeting regulatory and customer assurance expectations. Duties & Responsibilities: Security Strategy, Governance & Zero Trust Enablement - Own and lead the enterprise information security program, including strategy, policies, standards, and operating procedures - Define and operationalize Zero Trust security principles , including identity-centric access controls, least privilege, continuous verification, and explicit trust boundaries - Align security strategy with business objectives, risk tolerance, and HITRUST assurance requirements - Translate technical risks into clear business impact for executive leadership - Monitor eme...