Unlock Full Resume Report

This position is no longer accepting applications

Positions open for more than 30 days are automatically closed and marked as expired

Don't let one closed door slow you down, here's your next move:

July 15, 2026

Cybersecurity Engineer

Senior • Hybrid

New York, NY

Iterative Health is a healthcare technology and services company powering the acceleration of clinical research to transform patient outcomes.

We built a leading performance-driven network of 100+ sites across the US, Europe, India, and Australia, conducting research directly in the communities where care is delivered across gastrointestinal, hepatology, obesity, and cardiology. By combining deep clinical trial expertise with cutting-edge AI, we connect sponsors' scientific ambitions with high-performing research teams that expedite and expand access to novel therapeutics for patients in need. Today, Iterative Health is headquartered in Cambridge, Massachusetts, and New York City with 250+ employees world-wide.

As Iterative Health's first dedicated cybersecurity hire, you won't be stepping into an existing security program—you'll be building it. This is a rare opportunity to establish and lead the company's cybersecurity strategy, creating the foundation that will protect our people, technology, data, and business as we continue to scale.

In this role, you'll own the end-to-end security landscape, including our AWS cloud infrastructure, identity and access management, SaaS ecosystem, endpoint security, sensitive clinical and patient data, and the security and compliance frameworks that support our business. You'll work cross-functionally with IT, Engineering, Compliance, Legal, and business leaders to strengthen our security posture, reduce organizational risk, and embed security into every aspect of the company.

We're looking for a hands-on security leader who combines deep technical expertise with strong business judgment and a builder's mindset. You'll be equally comfortable architecting security solutions, responding to evolving threats, developing policies and controls, and influencing stakeholders across the organization. This is an opportunity to create a scalable, modern security program that grows alongside a fast-paced healthcare technology company.

Where You'll Drive Impact

Security Program Development

  • Serve as Iterative Health's first dedicated cybersecurity resource — build, mature, and operate the company's security program from the ground up.
  • Identify security gaps, prioritize remediation, and partner with the IT Director to define security priorities, roadmap items, and risk reduction plans.
  • Develop, maintain, and enforce security policies, standards, procedures, runbooks, and control documentation.
  • Provide company-wide subject matter expertise and support related to cybersecurity awareness and compliance.

Cloud & Infrastructure Security

  • Work with engineering team to secure and monitor AWS environments, including IAM, logging, encryption, backups, access controls, and overall cloud security posture.
  • Configure firewalls, encryption, and access controls across cloud and corporate infrastructure.
  • Improve security controls across Okta, Entra ID, Microsoft 365, Google Workspace, Box, SharePoint, AWS, and other cloud platforms.

Identity & Access Governance

  • Maintain and improve RBAC, access reviews, privileged access controls, admin role governance, service account oversight, and joiner/mover/leaver security processes.

Incident Response

  • Own incident response for suspected cyberattacks, account compromise, malware, data exposure, unauthorized access, and other security events.
  • Lead incident investigation, containment, remediation, documentation, root-cause analysis, and post-incident improvement tracking.

Compliance & Risk Management

  • Own security evidence collection, control documentation, remediation tracking, and audit support for SOC 2, HIPAA/HITECH, and applicable GDPR requirements.
  • Own all vendor assessment and security questionnaire responses.
  • Support vulnerability management, penetration testing, social engineering testing, customer security reviews, vendor security questionnaires, third-party risk assessments, security awareness, and user education.
  • Performs related duties as requested

What You Bring to the Team

  • Bachelor's degree in IT, engineering, mathematics, or a related field; candidates with extensive cybersecurity certification in lieu of a degree will be considered.
  • 5+ years of experience in cybersecurity, security engineering, cloud security, IT security, or a related technical security role.
  • Strong working knowledge of HIPAA, HITECH, SOC 2, and HITRUST frameworks.
  • Hands-on experience with AWS, Microsoft 365, and Google Workspace security tooling.
  • Experience with Bitdefender, Microsoft Defender, Intune, Entra ID, Microsoft Purview, Google Workspace security, Okta, or SIEM/logging tools.
  • Strong documentation skills, including policy and procedure writing.
  • Ability to communicate effectively with non-technical business partners.
  • Experience with PowerShell, Python, APIs, or security workflow automation.
  • Experience with vulnerability management, penetration test remediation, phishing simulation programs, or third-party risk reviews.

Preferred Qualifications

  • Knowledge of EU General Data Protection Regulation (GDPR).
  • One or more relevant certifications, including but not limited to: CompTIA Security+, CySA+, or Pen Test+; GCIH; ISC2 CCSP; AWS Certified Security Specialty (SCS-C03); Microsoft SC-200, SC-300, SC-401, SC-100, or SC-900; Google Cybersecurity Professional or Cloud Cybersecurity Certificate.
  • Experience building or maturing a security program in a high-growth or startup environment.
  • Background in healthcare technology, clinical research, or other highly regulated industries.

How We Work

  • Collaborative and low-ego team environment
  • High ownership and accountability culture
  • Fast-paced and highly iterative growth environment
  • Open communication and continuous learning mindset
  • Mission-driven organization focused on improving patient outcomes
  • Comfortable navigating evolving business priorities and opportunities




Benefits That Support You

We believe great teams do their best work when they feel supported — professionally and personally.

  • Hybrid work environment with in-office collaboration two days per week in either our NYC or Boston office
  • Comprehensive medical, dental, and vision coverage, with up to 80% of premiums covered by Iterative Health
  • Mental health and wellness support through Spring Health
  • Health HSA or FSA options, and commuter FSA contributions supported by Iterative Health
  • Unlimited PTO, 12 company holidays, and a company-wide shutdown between Christmas and New Years
  • 401(k) program with a company match of up to 3% (up to $3,000 annually)
  • Weekly in-office lunch benefit every Tuesday
  • 100% company-paid short-term and long-term disability coverage
  • Annual wellness and professional development stipend to support your health and growth
  • And more!



At Iterative Health, we're actively working towards creating an environment that is representative of the diversity of patients our technology serves. We are focused on building an equitable and inclusive culture, and by extension, hiring process. If you require any accommodations to make the application process or interviewing experience more accessible to you, please contact CandidateAccommodations@iterative.health.

Similar jobs you might like

Technology

Pfizer

Senior Associate, Informatics PM/BA

Senior

Pearl River, NY

82,700 - 82,700 USD/yr

🏢 Summary: Senior Associate role supporting regulated laboratory informatics systems from requirements gathering through testing, validation, deployment, and post-implementation support. The position partners with laboratory, operations, quality, and technical stakeholders to deliver compliant, fit-for-purpose solutions in a hybrid work arrangement. 🗂️ Requirements: MS/MA in a science-related discipline with 1+ years of industry experience, or BS/BA with 3+ years of industry experience, Understanding of solution development lifecycle activities in a regulated or quality-driven environment, Written and verbal communication skills, Organization skills to manage multiple priorities, timelines, and stakeholders, Microsoft Office 365 proficiency, Authorization for permanent employment in the United States, Availability for occasional evening and weekend work 📃 Skills: SDLC, cGLP, Validation, UAT, Microsoft365, LIMS, LabWare, SAS, SQL, ChatGPT, Copilot 🏢 Description: Use Your Power for Purpose In a world driven by rapid knowledge creation and supported by advanced technology platforms, Pfizer's digital and 'data first' strategy aims to accelerate the development of impactful technology solutions for research, development, and medical functions. By fostering collaboration and information sharing through business technology, we strive to help employees discover the best healthcare solutions for our patients. As part of a team of innovators, you will play a crucial role in maintaining our systems and ensuring the security of our information. We seek dedicated colleagues like you to enhance the quality of patient care through fresh ideas and cutting-edge information technology solutions. Your expertise in informatics will be instrumental in advancing R&D by developing, supporting, and validating computer systems. You will generate high-quality assay data within a regulated cGLP (current Good Laboratory Practice) laboratory environment to bolster Pfizer’s research initiatives and streamline processes. Leveraging your technical and documentation prowess, you will ensure regulatory compliance for the Research Department’s software solutions. As an associate, your dedication to the job will drive the completion of project tasks and objectives. Your domain knowledge and commitment will foster a collaborative atmosphere among your colleagues. It is your diligence and focus that will empower Pfizer to reach new milestones and provide aid to patients worldwide. What You Will Achieve As a Senior Associate, you will play a key role in translating business needs from laboratory and operations teams into practical info system solutions. You will partner with functional assay leads, operations leads, laboratory SMEs, and informatics partners to define requirements, support solution design, coordinate user testing, and manage project activities across the solution development lifecycle (SDLC). Your work will help ensure that info systems supporting regulated laboratory processes are fit for purpose, properly tested, and supported by appropriate documentation for validated environments. How You Will Achieve It Partner with functional assay leads, operations leads, laboratory SMEs, and informatics partners to understand business needs and translate them into info system solutions. Elicit, document, and maintain business and end-user requirements for new solutions and enhancements to existing solutions. Support solution design discussions by ensuring proposed system functionality aligns with laboratory workflows, operational needs, compliance expectations, and end-user requirements. Project manage assigned system initiatives through the solution development lifecycle, including requirements gathering, design review, testing, validation readiness, deployment support, and post-implementation follow-up. Develop, review, and execute user acceptance testing activities to confirm system functionality meets approved business and end-user requirements. Guide end users through testing activities, support test execution, document results, capture defects, and coordinate issue resolution with the technical teams. Generate, review, and maintain documentation supporting validated systems, including requirements, test scripts, SOPs, change controls, and related project deliverables. Facilitate regular project meetings with business stakeholders and technical partners to review priorities, status, risks, decisions, and action items. Collaborate with quality, validation, laboratory, and technical teams to ensure system deliverables are aligned with regulated system expectations. Maintain strict compliance with departmental, site, and corporate training, quality, and safety requirements. Here Is What You Need (Minimum Requirements) MS/MA in a science-related discipline such as computer science / mathematics or biological science with 1+ years of hands-on industry experience. Or BS/BA with 3+ years of hands-on industry experience. Understanding of solution development lifecycle activities in a regulated or quality-driven environment. Strong written and verbal communication skills. Strong organizational skills with ability to manage multiple priorities, timelines, and stakeholders. Proficient in Microsoft Office 365 applications. Bonus Points If You Have (Preferred Requirements) Experience supporting validated systems in a pharmaceutical, biotech, laboratory, or regulated environment. Familiarity with laboratory informatics systems such as LabWare LIMS and statistical analysis applications such as SAS. Experience creating documentation such as requirements, test scripts, traceability matrices, SOPs, or user guides. Experience working with cross-functional teams across business, quality, and technical organizations. Working knowledge of SQL and basic understanding of computer programming language. Experience using common AI tools, including generative technologies such as ChatGPT or Microsoft Copilot, to support problem solving and enhance productivity. Demonstrated curiosity for exploring how these tools can improve outcomes and understanding of responsible AI practices, including risk management and ethical use. Non-standard Work Schedule, Travel Or Environment Requirements Occasional evening and weekend work to meet critical deliverables. Work Location Assignment: Hybrid The annual base salary for this position ranges from $82,700.00 to $137,900.00. In addition, this position is eligible for participation in Pfizer’s Global Performance Plan with a bonus target of 10.0% of the base salary. We offer comprehensive and generous benefits and programs to help our colleagues lead healthy lives and to support each of life’s moments. Benefits offered include a 401(k) plan with Pfizer Matching Contributions and an additional Pfizer Retirement Savings Contribution, paid vacation, holiday and personal days, paid caregiver/parental and medical leave, and health benefits to include medical, prescription drug, dental and vision coverage. Learn more at Pfizer Candidate Site – U.S. Benefits | (uscandidates.mypfizerbenefits.com). Pfizer compensation structures and benefit packages are aligned based on the location of hire. The United States salary range provided does not apply to Tampa, FL or any location outside of the United States. Relocation assistance may be available based on business needs and/or eligibility. Candidates must be authorized to be employed in the U.S. by any employer. U.S. work visa sponsorship (such as TN, O-1, H-1B, etc.) is not available for this role now or in the future. Sunshine Act Pfizer reports payments and other transfers of value to health care providers as required by federal and state transparency laws and implementing regulations. These laws and regulations require Pfizer to provide government agencies with information such as a health care provider’s name, address and the type of payments or other value received, generally for public disclosure. Subject to further legal review and statutory or regulatory clarification, which Pfizer intends to pursue, reimbursement of recruiting expenses for licensed physicians may constitute a reportable transfer of value under the federal transparency law commonly known as the Sunshine Act. Therefore, if you are a licensed physician who incurs recruiting expenses as a result of interviewing with Pfizer that we pay or reimburse, your name, address and the amount of payments made currently will be reported to the government. If you have questions regarding this matter, please do not hesitate to contact your Talent Acquisition representative. EEO & Employment Eligibility Pfizer is committed to equal opportunity in the terms and conditions of employment for all employees and job applicants without regard to race, color, religion, sex, sexual orientation, age, gender identity or gender expression, national origin, disability or veteran status. Pfizer also complies with all applicable national, state and local laws governing nondiscrimination in employment as well as work authorization and employment eligibility verification requirements of the Immigration and Nationality Act and IRCA. Pfizer is an E-Verify employer. This position requires permanent work authorization in the United States. Pfizer endeavors to make www.pfizer.com/careers accessible to all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process and/or interviewing, please email disabilityrecruitment@pfizer.com. This is to be used solely for accommodation requests with respect to the accessibility of our website, online application process and/or interviewing. Requests for any other reason will not be returned. To learn more about acceptable and prohibited uses of AI during the recruitment process, please review our candidate AI-use guidelines available on Pfizer Careers. Information & Business Tech