CISO & Head of IT

At Cureety, we develop digital solutions that support people living with cancer and help healthcare teams monitor patients throughout their care journey.

As we expand across Europe and the United States following our acquisition of Reimagine Care, we are looking for a CISO & Head of IT to lead information security and oversee our outsourced corporate IT.

Your challenge: anticipate the risks that come with growth, strengthen security in everyday operations and establish shared practices across our European and US activities. You will build on an existing ISO 27001-certified Information Security Management System (ISMS).

Your role

Working directly with executive leadership, you will serve as Cureety’s CISO, owning our information security program and driving its implementation with our teams.

You will partner closely with the CTO, in a role separate from technical leadership. Our external IT provider handles day-to-day corporate IT support and operations.

Your main responsibilities:

• Lead security and risk management: identify key risks, define the security roadmap and drive treatment plans through remediation or escalation for decisions on residual risk.
• Strengthen operational security: agree appropriate protections for our cloud and SaaS environments with the CTO, coordinate security testing and verify that remediation is effective.
• Prepare for incidents and build resilience: lead incident preparedness and response coordination, organize security and business continuity exercises, and turn lessons learned into improvements.
• Embed security into everyday work: maintain and improve the ISMS, develop security awareness and help teams adopt practices suited to their work.
• Oversee corporate IT and third parties: define priorities for our IT provider, monitor service quality, strengthen oversight of devices, tools and access, assess supplier security and support new integrations.
• Demonstrate the effectiveness of our security program: maintain ISO 27001 certification, lead SOC 2 readiness, support the implementation of HIPAA requirements for our US activities, and coordinate audits and responses to customer and partner security requests.

You will work closely with Legal, Privacy and Quality to protect the sensitive data we handle in a regulated healthcare environment. You will give leadership a clear view of risks, progress and decisions requiring their attention.

Your profile

You have already led an information security program and delivered tangible improvements to an organization’s security. You can move from assessing a risk to working through its resolution with technical teams.

You bring:

• Solid experience in security risk management and delivering security improvements.
• The technical understanding to challenge security controls across cloud infrastructure, identities, access and data protection.
• Strong working knowledge of ISO 27001 and information security management systems.
• The ability to manage partners and bring technical and business teams together.
• At least one relevant certification: CISM, CISSP, ISO 27001 Lead Implementer / Lead Auditor, or an equivalent credential.
• Fluent professional English, both spoken and written.

Experience with SOC 2 and/or HIPAA, outsourced IT providers, or SaaS, healthcare or medical device environments would be an advantage.

You can prioritize, make a clear case for your recommendations and propose measures proportionate to the risks. You enjoy building structure while staying directly involved in solving practical problems with teams.

Why join Cureety?

• Ownership of information security, with direct access to executive leadership to present recommendations and secure decisions.
• An international program to shape, working with European and US teams during a key period of integration and growth.
• A tangible purpose: protecting the data and services used by patients and healthcare professionals.