Director, Cloud Security

About Judi Health

Judi Health is an enterprise health technology company providing a comprehensive suite of solutions for employers and health plans, including:

• Capital Rx, a public benefit corporation delivering full-service pharmacy benefit management (PBM) solutions to self-insured employers,
• Judi Health™, which offers full-service health benefit management solutions to employers, TPAs, and health plans, and
• Judi®, the industry’s leading proprietary Enterprise Health Platform (EHP), which consolidates all claim administration-related workflows in one scalable, secure platform.

Together with our clients, we’re rebuilding trust in healthcare in the U.S. and deploying the infrastructure we need for the care we deserve.

Position Summary

Reporting to the CISO, the Director of Cloud Security leads Judi Health’s cloud security strategy and engineering execution across our AWS environment. This role is responsible for advancing the security roadmap across FedRAMP readiness, continuous compliance, resilient cloud architecture, and automation at scale. The leader in this role will partner closely with engineering, infrastructure, compliance, and AI teams to embed modern security practices, strengthen detection and response capabilities, mature identity and access controls, and help establish a practical security framework that enables Judi Health’s AI initiatives while managing risk.

Position Responsibilities

• Lead, mentor, and scale a high-performing cloud security engineering function, fostering strong ownership, operational excellence, and continuous improvement.
• Own execution of the cloud security roadmap, prioritizing initiatives across FedRAMP readiness, zero trust architecture, cloud hardening, security automation, and continuous control validation.
• Define and evolve the cloud security strategy for Judi Health, aligning technical investments and security architecture decisions to business growth, regulatory commitments, platform resilience goals, and emerging AI initiatives.
• Serve as a trusted advisor to the CISO, engineering leaders, and executive stakeholders, helping drive secure-by-design decisions and modern security engineering practices across the organization.
• Lead the design, implementation, and continuous improvement of cloud security controls across AWS infrastructure, platforms, application environments, and supporting services.
• Identify, prioritize, and drive remediation of security risks across cloud services, infrastructure as code, third-party integrations, developer workflows, and enterprise platforms.
• Build and operationalize cloud security capabilities that support compliance with frameworks and customer obligations including FedRAMP, FISMA, SOC 2, HITRUST, HIPAA, and related control requirements.
• Drive threat detection, incident response readiness, vulnerability management, penetration testing, and security validation efforts to proactively identify and reduce risk.
• Advance automation for security monitoring, alerting, evidence collection, and policy enforcement to improve scalability and support continuous compliance.
• Establish meaningful security metrics and reporting for cloud posture, control effectiveness, and roadmap progress, and communicate insights clearly to senior leadership.
• Partner with software engineering, platform engineering, DevOps, IT, and AI teams to embed security into architecture, infrastructure, the software development lifecycle, and AI-enabled capabilities.
• Work closely with compliance, legal, privacy, and risk management teams to translate regulatory and customer requirements into practical, auditable technical controls.