InfoSec Manager
- Market p25–p75
- $143k–$203k
- Forus p25–p75
- $178k–$235kn=4
- Opened · 30d
- +0
- Closed · 30d
- −0
- Opened · 7d
- +1106% of open
- All software engineering
- 75,258open
About us
Forus is building an AI-powered network that connects doctors, pharmacies, payers, and biopharma to accelerate new science to patients.
Our platform automates the complexity between a doctor prescribing a medicine and a patient starting treatment, including insurance coverage, financial assistance, and supply chain navigation. We provide this support free to doctors and patients, helping them get life-changing medicine faster, cheaper, and easier. The resulting network enables biopharma companies to design better research, launch new drugs more effectively, and invest in harder-to-treat conditions.
Forus has exceptional product-market fit and is growing rapidly through organic adoption
Accelerating scale: We already support patients across more than 85% of ZIP codes and partner with 9 of top 15 largest biopharma companies in the world.
AI-native, durable model: Our business becomes stronger as AI improves, as every new doctor, patient, and partner makes the network more valuable.
Backing to build for the long term: We raised $300M+ from leading investors to build an exceptional team and unlock the full scale of the opportunity.
Our number one priority is scaling to market demand. We are looking for individuals who are high horsepower, high throughput, and hyper resourceful to help us increase capacity and grow. We move fast and need to move faster.
If we succeed, science will be the only limit to medicine.
All full-time roles are in person in New York.
About the role
As InfoSec Manager at Forus, you will own the infrastructure, security posture, and systems that enable our team and protect the organization. This is a hands-on infrastructure role: you will implement systems, troubleshoot issues, make architecture calls on tooling and access, and take on hard operational problems yourself. You will also own the strategic side - building security programs, managing vendor relationships, and ensuring that as Forus scales, our infrastructure and compliance architecture scales with us.
InfoSec at Forus sits at the intersection of product engineering, operations, and security. You need to enable a fast-moving team to ship quickly, work seamlessly with external vendors and contractors, navigate compliance and regulatory requirements, and build visibility into what software and systems the organization is actually using. The work spans hands-on troubleshooting, project execution (migrations, system implementations), ongoing security and compliance programs, and vendor management.
This is a demanding role, with a high level of autonomy and responsibility. You will be expected to "act like an owner" and commit yourself to Forus' success. If you are low-ego, hungry to learn, and excited about intense, impactful work that drives both company growth and accelerated career progression, we want to hear from you.
If you join, you will
Own Forus' InfoSec infrastructure end to end - from access controls and identity management through device management, cloud systems, compliance, and security posture
Implement and manage core IT systems (identity and access, SIEMs, shadow IT visibility) and make credible calls on which new tools and systems the organization should adopt
Manage relationships with external IT vendors, from contracting and feedback loops through escalations, approvals, and accountability
Build and execute Forus' security program - identifying gaps in our posture, introducing new tools and configurations, and regulating permissions and access as we scale
Manage in-office IT operations including networking, A/V, device deployment, and troubleshooting, while also building systems and processes so these don't become your bottleneck
Lead and automate onboarding and offboarding workflows to ensure seamless employee experience and tight security as the team grows
Work cross-functionally with engineering, operations, legal, and compliance to translate business and regulatory needs into technical architecture and operational practices