Director of Security Engineering and Operations

Director of Security Engineering and Operations

Join to apply for the Director of Security Engineering and Operations role at Aeroflow Health
.

2 days ago – Be among the first 25 applicants.

Aeroflow Health – Director of Cybersecurity

Aeroflow Health is made up of creative and talented associates who are transforming the home medical equipment industry. Our patient‑centric business model is founded on innovation through technology and cutting‑edge delivery platforms. We have grown to be a leader in the home medical equipment segment of the healthcare industry, are among the fastest‑growing healthcare companies in the country and have been recognized on Inc.

5000’s list of fastest‑growing companies in the U.S. As Aeroflow has grown, our need to curate an amazing employee environment and experience has grown as well. We’re working hard to ensure that Aeroflow remains a premier employer in Western North Carolina, thereby bettering the everyday lives of the employees who work so hard to serve our patients.

We are seeking an experienced and highly capable Director of Cybersecurity to lead all aspects of our security program—technical, operational, and strategic. This leader will take ownership of an established security roadmap and drive execution across the organization to ensure Aeroflow Health is protected from internal and external threats.

This role is ideal for a hands‑on, highly technical security leader who can roll up their sleeves, guide engineers, implement tools and processes, and build strong partnerships across Engineering, IT, Compliance, Legal, Shared Services, and Executive leadership. The Director will oversee a small but highly skilled security team, including Security Engineering, Security Operations, and IT Risk & Compliance, while maintaining direct involvement in core security projects and incident response.

This is a high‑visibility, business‑critical role responsible for safeguarding the organization, maturing our security posture, and ensuring we remain compliant, resilient, and ahead of emerging threats.

• Own and execute the enterprise security roadmap—ensuring planned initiatives are delivered, measured, and continuously improved.
• Provide strong, clear leadership to the Security Engineering and Security Compliance functions.
• Serve as the primary point of accountability for organizational security posture, reporting to senior leadership and key stakeholders.
• Develop, document, and enforce security policies, procedures, standards, and best practices.
• Actively participate in daily security engineering tasks, including tool implementation, security monitoring, incident investigation and vulnerability management.
• Lead the architecture, deployment and optimisation of security technologies (SIEM, EDR, IAM, DLP, cloud security tools, network security solutions, etc.).
• Oversee access management strategy and operations, ensuring strong identity, authorisation and least‑privilege controls across all systems and environments.
• Partner with Engineering to secure systems, applications and infrastructure.
• Oversee periodic penetration tests, threat modelling exercises, incident simulations and red/blue team activities.
• Manage and mature third‑party security risk practices, including vendor security reviews, ongoing monitoring and contractual security requirements.
• Ensure regulatory and audit compliance (HIPAA, SOC2, HITRUST and other healthcare/security frameworks).
• Partner with Legal and Compliance teams to ensure security programs, tools and practices meet contractual, regulatory and industry expectations.
• Maintain documentation for compliance requirements and support internal and external audit efforts.
• Serve as a trusted advisor to leadership and technical teams regarding risk, architecture and security‑by‑design.
• Drive company wide education, awareness and accountability to embed security into every function.
• Manage and grow a high‑performing security team, including a Security Engineer and a Security Compliance Specialist.
• Set clear expectations, provide coaching and empower team members to execute and grow into subject‑matter experts.
• Foster a collaborative…