Information security [h1.location_city]
[job_alerts.create_a_job]
Information security • chicago il
Manager, Information Security
RethinkFirstChicago, IL, USBusiness Information Security Officer (BISO)
Purple DriveChicago, Illinois, USA- [promoted]
Information Systems Security Officer (ISSO)
Contact Government Services, LLCChicago, IL, US- [promoted]
Chief Information Security Officer
GVW GroupChicago, IL, USInformation Security Architect
Next Step Systems – Recruiters for Information Technology Jobs Top IT Recruiting FirmChicago, IL, USAInformation Security Metrics and Reporting Analyst
Canadian Imperial Bank of CommerceChicago, Illinois, USAInformation Security Engineer
MetroSysChicago, IL, USInformation Security Engineer / Analyst
KonnectITChicago, IL, USCRM Information Security Systems Officer
LeidosAshburn, Illinois, USAInformation Security Architect
University of ChicagoIllinois : ChicagoExecutive Director, Information Security
Chicago Public SchoolsChicago, ILInformation Security Compliance Analyst
Alliant Credit UnionChicago, IL, USInformation Security AnalystCyber Security AnalystSecurity Analyst
VDart IncChicago, Illinois, USAInformation Security Analyst
Vedder Price CareersChicago, Illinois, USA- [promoted]
Manager of Information Security
Beyond FinanceChicago, IL, USSenior Information Security Engineer – Cloud Engineer
University of Chicago MedicineChicago, Illinois, USAInformation Security Business Partner
ZSChicago, Illinois- [promoted]
Information Security Engineer
AAreteChicago, IL, US- [promoted]
Senior Manager, Information Security Office (ISO) Consultant
NYC StaffingChicago, IL, USManager, Information Security
RethinkFirstChicago, IL, US- [job_card.full_time]
- [filters_job_card.quick_apply]
About Rethink First Rethink First is a leading behavioral health technology company working to make mental wellness, education, and support accessible and scalable.
Through our suite of cloud-based platforms—including RethinkEd, RethinkCare, and RethinkBH—we serve educators, employers, and providers with tools that deliver measurable, inclusive outcomes. We're on a mission to make behavioral health more effective, equitable, and human—and we’re looking for a creative visionary to help lead that charge. About the Role We are building a modern, cloud-forward security program grounded in Cyber Resilience, Application Security, and Security Assurance.
As our Manager, Information Security, you will be the operational and execution leader for our Security Assurance function while helping shape key processes across SecOps and AppSec.
This role is ideal for someone who thrives in a high-growth SaaS environment, collaborates well cross-functionally, and wants to help mature a security program that must support HIPAA, SOC 2 Type II, HITRUST, and a broad healthcare customer base.
You will own the day-to-day execution of GRC, Audit Readiness, Evidence Collection, Policy Management, TPRM, and Client Trust—and must have hands-on experience implementing or operating Vanta as a centralized compliance automation platform.
You will serve as a multiplier for the Sr Director, creating repeatable processes, driving deadlines, maturing documentation, and ensuring audit-ready control operation across Azure, M365, and our SaaS product ecosystem.
Key Responsibilities Security Assurance Leadership (Primary Responsibility – 60%) Lead the end-to-end Security Assurance function across SOC 2, HIPAA, HITRUST, and regulatory frameworks.
Act as the program manager for all audits, coordinating with Legal, HR, Engineering, Product, and Infrastructure to maintain year-round audit readiness.
Own the implementation, configuration, optimization, and continuous operation of Vanta, including :
- Control mapping and ownership assignments Evidence collection workflows Vendor risk management modules Client Trust functionality (best answers, trust portal, knowledge base) Build and maintain an audit calendar, evidence repository, and standardized evidence collection playbooks.
- Drive development and continuous maintenance of security policies, standards, and procedures.
- Operate the Third-Party Risk Management process, including vendor classification (Tier 1 / BAA), questionnaire review, residual risk scoring, and contract security review.
- Respond to customer security questionnaires, RFPs, and client audit requests with clarity, accuracy, and speed.
Cyber Resilience & SecOps Leadership (25%) While not a hands-on SecOps role, you will :
Hands-on experience with :
Benefits :