Information Security Leader

Agfa Health Care is a division of the Agfa-Gevaert Group which is headquartered in Mortsel, Belgium and traded on Euronext Brussels (AGFB).

At Agfa Health Care, we support healthcare professionals across the globe to transform the delivery of care. Our focus is 100% on providing best-of-suite Imaging IT software solutions that enable secure, effective and sustainable imaging data management.

From product development to implementation, our unified Enterprise Imaging Platform is purpose-built to reduce complexity, improve productivity and deliver clinical value. We use our proven track record as an innovator, our in-depth medical knowledge and our strategic guidance to help healthcare providers achieve their clinical, operational and business strategies.

AGFA Health Care is seeking an Information Security Leader to define and execute the company's global cybersecurity vision across all business units and geographies. This role provides enterprise-wide security leadership with primary operational focus on cloud-native and SaaS platforms, while maintaining oversight of legacy onpremise environments.

The leader is accountable for measurable security outcomes, ensuring the confidentiality, integrity, and availability of healthcare data and systems, strengthening regulatory posture, and reinforcing trust in AGFA Health Care's imaging and informatics platforms. This is a hands‑on leadership role that combines strategic partnership at the enterprise level with execution-oriented ownership of security operations.

• Remote: US / Canada

• Scaled and resilient security operations capabilities aligned with business growth and risk maturity.
• Material reduction in critical and high-risk security findings through preventive controls and remediation.
• Successful ISO 27001 / ISO 27017 / ISO 27018 HITRUST audit outcomes, with improved audit efficiency year over year.
• Demonstrated adoption of Secure‑by‑Design and Dev Sec Ops  practices across cloud and on‑premise products and R&D pipelines.
• Improved executive visibility into cyber risk with actionable, business‑oriented reporting.

• Define and execute AGFA Health Care's enterprise information security strategy in alignment with business goals, healthcare regulations, and patient safety priorities.
• Act as a trusted advisor to executive leadership and the board on cyber risk posture, emerging threats, and security investment priorities.
• Serve as an executive customer‑facing security leader, engaging directly with clients to articulate the company's security strategy, build trust, address risk and compliance concerns, and support sales efforts by positioning security as a strategic business enabler.
• Lead the development and evolution of governance frameworks, policies, and standards supporting HIPAA, FDA 21 CFR Part 11, ISO 27001, ISO 27017, ISO 27018, and SOC 2.
• Embed security by design across products, platforms, imaging workflows, and the full data lifecycle, including third‑party and embedded solutions.
• Partner with Marketing and commercial teams to articulate AGFA Health Care's security posture and trust narrative to the market.
• Champion a strong culture of security awareness, education, and accountability across R&D, Cloud Ops, and customer‑facing teams.

• Provide leadership and direction for security operations across AGFA Health Care, including cloud and on‑premise environments.
• Establish, scale, and continuously improve SOC capabilities, ensuring effective detection, response, and recovery aligned with business needs and risk profile.
• Oversee threat intelligence, vulnerability management, and incident response with a focus on automation and continuous improvement.
• Partner with Cloud Ops and Dev Ops teams to integrate Dev Sec Ops  practices into CI/CD pipelines.
• Optimize and scale security tooling, including AWS‑native services and endpoint protection platforms.

• Ensure compliance with global security and privacy standards across cloud and on‑premise environments.
• Oversee risk assessments, privacy impact analyses, and security reviews.
• Maintain and evolve the incident response program in…