Lead, Cybersecurity

Description

Since 2000, Smartlinx has been redefining how senior care organizations manage their workforce. Our modern, purpose-built solutions from dynamic scheduling and compliance to integrated payroll and real-time analytics give providers the agility and intelligence needed to thrive in today's healthcare environment.

Since 2000, Smartlinx has been redefining how senior care organizations manage their workforce. Our modern, purpose-built solutions from dynamic scheduling and compliance to integrated payroll and real-time analytics give providers the agility and intelligence needed to thrive in today's healthcare environment.

As the parent company of Bek Tek (Hosted Time) and Staffer Link, Smartlinx brings together a wide range of solutions for managing both full-time and contingent staff. Together, these capabilities give Smartlinx the most comprehensive workforce management solution set in senior care.

We are driven by one mission: to power exceptional senior care through smarter workforce management. Join us as we shape the future of work in long-term care.

Reporting to the Head of IT, the Lead, Cybersecurity is responsible for defining and operating Smartlinx's cybersecurity program across its multi-tenant SaaS products, cloud infrastructure, corporate technology environment, data platforms, integrations, and third-party services.

This leader owns SaaS product and application security, cloud and infrastructure security, identity and access management, vulnerability management, security monitoring, incident response, third-party risk, and SOC 2 Type II readiness and audit execution. The role is accountable for protecting sensitive healthcare workforce, payroll, personally identifiable information, and customer data while enabling reliable and timely product delivery.

The Lead, Cybersecurity will partner closely with Product, Engineering, Architecture, Quality Assurance, Dev Ops, Data Engineering, Corporate IT, Compliance, Legal, Customer Support, and Customer Success to integrate security into design, development, deployment, operations, and customer commitments.

Success in this role requires a hands‑on, pragmatic security leader who can translate business and regulatory requirements into effective technical controls, personally investigate risk and incidents, drive remediation to closure, and communicate clearly with executives, auditors, customers, and technical teams.

SaaS Product and Application Security

• Own the product-security strategy and operating model across the Smartlinx, Bek Tek (Hosted Time), and Staffer Link product portfolio.
• Embed security throughout the product development lifecycle, including requirements, architecture, design, development, testing, release, and production operation.
• Lead threat modeling, security architecture reviews, abuse‑case analysis, and risk assessments for new products, features, APIs, integrations, mobile applications, and material platform changes.
• Establish secure coding standards and engineering guidance based on OWASP, CWE, API security, and relevant industry practices.
• Integrate automated security testing into CI/CD pipelines, including static application security testing, dynamic application security testing, software composition analysis, secrets scanning, infrastructure‑as‑code scanning, container scanning, and software bill of materials generation.
• Review and strengthen authentication, authorization, role‑based access control, session management, tenant isolation, API security, file handling, encryption, audit logging, and secure data‑export capabilities.
• Plan and coordinate independent application and API penetration testing, validate findings, assign risk‑based remediation deadlines, and confirm…