IT Security Lead

Who We Are

QGenda is redefining healthcare workforce management everywhere care is delivered. We're on a mission to empower the healthcare industry to better onboarding, deploy, and manage their workforce. Over 4,500 healthcare organizations have trusted us to help them make strategic workforce decisions through our unified software platform. With more than 800 employees across the US, we are united in our vision and culture to make a difference for our customers, while enjoying the day-to-day. 

At QGenda, we value our employees and their contributions toward the success of the business. We strive to create a dynamic work environment that fosters growth, innovation, and collaboration, where employees can be proud of the work they do and the impact it has on the healthcare industry. 

QGenda is headquartered in Atlanta. 

To learn more about QGenda, visit us at qgenda.com or follow us on Instagram or LinkedIn. 

About Your Role 

As our IT Security Lead at QGenda, you will serve as a senior individual contributor responsible for leading IT security operations, risk management, and governance, risk, and compliance (GRC) initiatives across our IT systems, infrastructure, and SaaS applications. You will identify and reduce risk, strengthen security controls, and mature our GRC program from policy and control design through audit readiness, evidence collection, and remediation. Working closely with IT and Help Desk, Legal, Product Development, and business teams, you will streamline control management and help ensure alignment with applicable security standards. You will also partner with Product Development’s security team to align enterprise IT security with QGenda’s broader security program.

How You’ll Make an Impact 

• Lead IT security operations and advance QGenda’s enterprise IT security strategy and GRC initiatives, translating business objectives and risk priorities into measurable improvements.
• Oversee security controls across QGenda’s IT platforms and assets, including identity, endpoints, SaaS applications, and network infrastructure. Promote secure architecture and configuration, assess control effectiveness and attack surface, address gaps, define security metrics, and report security posture to executive leadership.
• Serve as IT’s primary security subject matter expert (SME), providing daily guidance to IT Systems Administrators and Help Desk teams supporting IT, CRM, and Procurement on secure configuration and control implementation. Partner with system owners to drive remediation.
• Collaborate with IT, Help Desk, and business stakeholders to align security initiatives with business objectives and integrate security into enterprise IT projects, system changes, and operational processes. Coordinate with Product Development’s security team where initiatives overlap.
• Lead the IT vulnerability management program, including regular scans and assessments, risk-based prioritization, timely remediation and patching, and validation of fixes.
• Lead internal and external IT security audits and compliance assessments, including control mapping, evidence coordination, gap analysis, remediation tracking, and audit readiness.
• Improve GRC operations by automating control testing, evidence collection, and compliance workflows, and establishing ongoing monitoring of control status.
• Develop, implement, and maintain IT security policies, standards, and best practices aligned with applicable frameworks, audit requirements, regulations, and customer and contractual obligations including NIST, ISO 27001, SOC 1, SOC 2, SOX, HIPAA, and FedRAMP, as applicable.
• Evaluate security risks associated with internal AI adoption and other new technologies, including configuration, data exposure, vulnerabilities, and potential impacts to existing controls. Recommend appropriate safeguards.
• Coordinate incident preparedness and response with relevant teams, capture lessons learned, and provide security awareness training and guidance to staff.

Who You Are 

• You operate effectively as a senior individual contributor, independently leading cross-functional security initiatives that measurably improve security posture and influencing teams across IT and the business.
• You bring hands-on experience securing enterprise IT environments across identity and access management, endpoints, SaaS applications, network infrastructure, and macOS and Windows environments.
• You have experience with enterprise security and IT platforms such as Okta, Zscaler, CrowdStrike, Google Workspace, Microsoft, Jamf, Intune, and Meraki, or comparable tools.
• You understand enterprise risk management and GRC, and can apply frameworks and requirements such as NIST, ISO 27001, SOC 1, SOC 2, SOX, HIPAA, and FedRAMP, as applicable, to practical security controls.
• You have experience leading or supporting security audits and compliance assessments in highly regulated environments with extensive compliance requirements, including working with auditors, mapping controls, gathering evidence, remediating gaps, and monitoring controls. You’re familiar with GRC automation and continuous monitoring platforms. Familiarity with tools such as Vanta is a plus.
• You have experience managing vulnerability programs, including scanning, risk prioritization, remediation coordination, patching, and validation. Familiarity with tools such as Tenable is a plus.
• You can assess security risks in SaaS applications, internal AI tools, and emerging technologies, including configuration, access, data exposure, vulnerabilities, and impacts to existing controls. You can also use AI and machine learning to improve security workflows while maintaining human oversight and critical judgment.
• You have experience supporting incident response and security awareness. You communicate effectively with internal and external stakeholders and can explain cybersecurity principles and risks to technical and nontechnical audiences.

Experience You Bring 

• Minimum of 5 years of experience in IT security, GRC, security engineering, security operations, or related fields.
• Bachelor’s degree from an accredited college or university.

#LI-Hybrid

Applicants for this position must be authorized to work for any employer in the United States (U.S.), including being located in the US. We are unable to sponsor, take over sponsorship of, or hire candidates with an employment visa at this time. 

What’s In It For You

We offer a comprehensive total rewards package to support our full-time employees and their family’s day-to-day needs, well-being and major life events, which includes: 

• Fully company-paid options for medical (both in-person and virtual), dental and vision insurance
• Generous paid time off (PTO) policy to enjoy periods of uninterrupted rest and relaxation for a healthy work/life balance
• Paid parental leave for birth, adoption or permanent placement
• 401(k) with company match 
• Annual Costco membership, cell phone stipend, commuter benefits, in-office perks and more 

QGenda delivers technology solutions to improve how healthcare is delivered and increase access — for everyone. We can only succeed by bringing together diverse minds, thoughts, ideas and team members to create better solutions for our customers and make us a better company as a whole. We are committed to creating a culture of embracing diversity, inclusion and equity for all. 

QGenda is an Equal Employment Opportunity employer and makes all employment decisions without regard to race, color, religion, creed, gender, sex (including pregnancy), sexual orientation, gender identity or expression, natural origin, ancestry, age, marital status, disability or genetic information, military status, status as a disabled or protected veteran or any other protected status under applicable law. 

If you require accommodations or assistance to complete the online application process, please contact recruiting@qgenda.com and identify the type of accommodation or assistance you are requesting. Do not include any medical or health information in this email. We will respond to your email promptly.