Director, Information Security

AGFA Health Care is seeking an operational Director, Information Security to define and execute the company’s global cybersecurity vision across all business units and geographies. This role provides enterprise-wide security leadership with primary operational focus on cloud-native and SaaS platforms, while maintaining oversight of legacy on‑premise environments.

The leader is accountable for measurable security outcomes, ensuring the confidentiality, integrity, and availability of healthcare data and systems, strengthening regulatory posture, and reinforcing trust in AGFA Health Care’s imaging and informatics platforms. This is a hands‑on leadership role that combines strategic partnership at the enterprise level with execution‑oriented ownership of security operations.

Location:

• Remote: US

What You’ll Do:

• Scaled and resilient security operations capabilities aligned with business growth and risk maturity.
• Material reduction in critical and high‑risk security findings through preventive controls and remediation.
• Successful ISO 27001 / ISO 27017 / ISO 27018 HITRUST audit outcomes, with improved audit efficiency year over year.
• Demonstrated adoption of Secure‑by‑Design and Dev Sec Ops  practices across cloud and on‑premise products and R&D pipelines.
• Improved executive visibility into cyber risk with actionable, business‑oriented reporting.

Operational Oversight

• Provide leadership and direction for security operations across AGFA Health Care, including cloud and on‑premise environments.
• Establish, scale, and continuously improve SOC capabilities, ensuring effective detection, response, and recovery aligned with business needs and risk profile.
• Oversee threat intelligence, vulnerability management, and incident response with a focus on automation and continuous improvement.
• Partner with Cloud Ops and Dev Ops teams to integrate Dev Sec Ops  practices into CI/CD pipelines.
• Optimize and scale security tooling, including AWS-native services and endpoint protection platforms.

Risk, Compliance, and Governance

• Ensure compliance with global security and privacy standards across cloud and on‑premise environments.
• Oversee risk assessments, privacy impact analyses, and security reviews.
• Maintain and evolve the incident response program in partnership with Legal, Privacy, ISP, and Quality and Regulatory teams.

Strategic Leadership

• Define and execute AGFA Health Care’s enterprise information security strategy in alignment with business goals, healthcare regulations, and patient safety priorities.
• Act as a trusted advisor to executive leadership and the board on cyber risk posture, emerging threats, and security investment priorities.
• Serve as an executive customer‑facing security leader, engaging directly with clients to articulate the company’s security strategy, build trust, address risk and compliance concerns, and support sales efforts by positioning security as a strategic business enabler
• Lead the development and evolution of governance frameworks, policies, and standards supporting HIPAA, FDA 21 CFR Part 11, ISO 27001, ISO 27017, ISO 27018, and SOC 2.
• Embed security by design across products, platforms, imaging workflows, and the full data lifecycle, including third‑party and embedded solutions.
• Partner with Marketing and commercial teams to articulate AGFA Health Care’s security posture and trust narrative to the market.
• Champion a strong culture of security awareness, education, and accountability across R&D, Cloud Ops, and customer‑facing teams.

Who You Are:

• 10+ years of progressive experience in cybersecurity with 5+ years leading enterprise security programs or functions; proven leadership in high‑growth or highly regulated environments.
• Demonstrated success designing and operating security programs aligned to…