Director, Corporate Security

Director, Corporate Security

At Komodo Health, our mission is to reduce the global burden of disease. And we believe that smarter use of data is essential to this mission. That's why we built the Healthcare Map — the industry's largest, most complete, precise view of the U.S. healthcare system — by combining de-identified, real-world patient data with innovative algorithms and decades of clinical experience.

The Healthcare Map serves as our foundation for a powerful suite of software applications, helping us answer healthcare's most complex questions for our partners. Across the healthcare ecosystem, we're helping our clients unlock critical insights to track detailed patient behaviors and treatment patterns, identify gaps in care, address unmet patient needs, and reduce the global burden of disease.

As we pursue these goals, it remains essential to us that we stay grounded in our values: be awesome, seek growth, deliver "wow," and enjoy the ride. At Komodo, you will be joining a team of ambitious, supportive Dragons with diverse backgrounds but a shared passion to deliver on our mission to reduce the burden of disease — and enjoy the journey along the way.

Komodo Health needs a Director of Corporate Security who can assess the current state of our internal security environment and help drive strategic improvements across the company. This role will focus on protecting employee systems, identity, devices, endpoints, internal networks, business applications, vendor tools, and workforce-related security risk. The Director, Corporate Security will work closely with IT, Product Security, Engineering, Compliance, Legal, and business leaders to identify gaps, improve execution, and put more consistent operating practices in place.

This role reports directly to the CFO, and carries executive visibility from day one. The Director will be expected to operate at all levels — setting strategy, building the program, and getting into the details when it matters.

Looking back on your first 12 months at Komodo Health, you will have…

• Delivered a rigorous current-state assessment of Komodo's corporate security environment, with clear findings, ownership, and a sequenced improvement plan signed off by the CFO and CISO.
• Stood up or significantly strengthened core capabilities: device trust, identity and access governance, offboarding discipline, internal access controls, SaaS security posture, and external-sharing safeguards.
• Established a security program framework that can scale with the company — clear policies, documented controls, repeatable processes, and metrics that tell a real story to the board and auditors.
• Improved day-to-day security operations: tightened monitoring with our SIEM tool, reduced MTTD/MTTR on incidents, and introduced post-mortem discipline that actually improves things.
• Built practical AI governance guardrails for internal enterprise tools, with SSO, RBAC, approved-tool standards, and usage expectations employees will actually follow.
• Established yourself as a trusted, credible partner to IT, Engineering, Legal, Compliance, and Procurement — someone who makes cross-functional work easier, not harder.

You will accomplish these outcomes through the following responsibilities…

• Own corporate security strategy and execution across identity and access management, endpoint and device trust, internal SaaS security, data-sharing controls, workforce risk, and incident response for corporate assets.
• Build and maintain a multi-year corporate security roadmap, prioritized by risk, business context, and resource constraints. Present progress and risk posture clearly to the Komodo Executive Team.
• Lead security operations across existing tooling:
  Our existing EDR/MDR, email security, SIEM/monitoring tools, and evolving vendor stack. Own response coordination, remediation tracking, and escalation.
• Partner with IT to strengthen provisioning and deprovisioning, access reviews, device management, and internal network and application security controls. Hold the line on offboarding.
• Establish practical guardrails for internal enterprise AI use — approved-tool standards, SSO and domain capture, RBAC, retention,…