InfoSec Manager

About the role

ABOUT US Forus is building an AI-powered network that connects doctors, pharmacies, payers, and biopharma to accelerate new science to patients. Our platform automates the complexity between a doctor prescribing a medicine and a patient starting treatment, including insurance coverage, financial assistance, and supply chain navigation. We provide this support free to doctors and patients, helping them get life-changing medicine faster, cheaper, and easier. The resulting network enables biopharma companies to design better research, launch new drugs more effectively, and invest in harder-to-treat conditions. Forus has exceptional product-market fit and is growing rapidly through organic adoption: - Accelerating scale: We already support patients across more than 85% of ZIP codes and partner with 9 of top 15 largest biopharma companies in the world. - AI-native, durable model: Our business becomes stronger as AI improves, as every new doctor, patient, and partner makes the network more valuable. - Backing to build for the long term: We raised $300M+ from leading investors to build an exceptional team and unlock the full scale of the opportunity. Our number one priority is scaling to market demand. We are looking for individuals who are high horsepower, high throughput, and hyper resourceful to help us increase capacity and grow. We move fast and need to move faster. If we succeed, science will be the only limit to medicine. All full-time roles are in person in New York. ABOUT THE ROLE As InfoSec Manager at Forus, you will own the infrastructure, security posture, and systems that enable our team and protect the organization. This is a hands-on infrastructure role: you will implement systems, troubleshoot issues, make architecture calls on tooling and access, and take on hard operational problems yourself. You will also own the strategic side - building security programs, managing vendor relationships, and ensuring that as Forus scales, our infrastructure and compliance architecture scales with us. InfoSec at Forus sits at the intersection of product engineering, operations, and security. You need to enable a fast-moving team to ship quickly, work seamlessly with external vendors and contractors, navigate compliance and regulatory requirements, and build visibility into what software and systems the organization is actually using. The work spans hands-on troubleshooting, project execution (migrations, system implementations), ongoing security and compliance programs, and vendor management. This is a demanding role, with a high level of autonomy and responsibility. You will be expected to "act like an owner" and commit yourself to Forus' success. If you are low-ego, hungry to learn, and excited about intense, impactful work that drives both company growth and accelerated career progression, we want to hear from you. IF YOU JOIN, YOU WILL: - Own Forus' InfoSec infrastructure end to end - from access controls and identity management through device management, cloud systems, compliance, and security posture - Implement and manage core IT systems (identity and access, SIEMs, shadow IT visibility) and make credible calls on which new tools and systems the organization should adopt - Manage relationships with external IT vendors, from contracting and feedback loops through escalations, approvals, and accountability - Build and execute Forus' security program - identifying gaps in our posture, introducing new tools and configurations, and regulating permissions and access as we scale - Manage in-office IT operations including networking, A/V, device deployment, and troubleshooting, while also building systems and processes so these don't become your bottleneck - Lead and automate onboarding and offboarding workflows to ensure seamless employee experience and tight security as the team grows - Work cross-functionally with engineering, operations, legal, and compliance to translate business and regulatory needs into technical architecture and operational practices WE’RE LOOKING FOR YOU IF YOU HAVE: - 5+ years in IT operations, infrastructure, or security roles with a track record of building systems and scaling organizations - A track record of implementing medium-to-large IT systems in previous roles, such as identity management, SIEM, access control platforms, or similar infrastructure-scale work - Hands-on experience in a startup or high-growth environment where you've worn multiple hats and built IT practices from the ground up, not just maintained them - Demonstrated ability to work seamlessly cross-functionally with people, engineering, operations, legal, and compliance - you understand what each team needs and you translate between them fluently - Experience managing employees at scale, including facilitating smooth on/offboarding workflows and thinking systematically about identity and access as the team grows - High agency and ownership mentality; you see problems and solve them rather than escalate, and you drive outcomes even when they span multiple teams or vendors - Strong written and verbal communication that allows you to be an effective participant in both internal debates and external vendor relationships - Track record of moving quickly, finding shortcuts, and going to unreasonable lengths to deliver on goals This is a list of ideal qualifications for this position. If you don't meet every single one of them, you should still consider applying! We’re excited to work with people from underrepresented backgrounds, and we encourage people from all backgrounds to apply. WORKING WITH US Forus is based in New York, with our full team working out of a beautiful and spacious office in SoHo.  We run as a high-trust environment with high autonomy, which requires that everyone is fully competent and operates in line with our principles: - Do the math. Be rigorous, assume nothing. Break problems down and reason from the ground up. Stay open to changing your mind. - Resourceful optimism. Assume problems are solvable. Be audacious. Resist false constraints and push beyond the obvious before deciding. - Spit it out. Speak directly, invite critique, avoid equivocation. We want right answers, not comfortable ones. All killer, no filler. - Raise the bar. Hold a high standard for your pace and execution, and elevate the performance of the team around you. Mamba mentality. - Fight for users. Start with users’ realities, not ours. Resist optimizing for internal convenience over user outcomes. We provide competitive compensation with meaningful equity (for full-time employees). Everyone who joins will be a major contributor to our success, and we reflect this through ownership and pay. We also provide rich benefits to ensure you can focus on creating impact (for full-time employees): - Fully covered medical, vision, and dental insurance. - Memberships for One Medical, Talkspace, Teladoc, and Kindbody. - Unlimited paid time off (PTO) and 16 weeks of parental leave. - 401K plan setup, FSA option, commuter benefits, and DashPass. - Lunch at the office every day and Dinner at the office after 6:30 pm. Our salary ranges are based on paying competitively for our company’s size and industry, and are one part of the total compensation package that also includes equity, benefits, and other opportunities at Forus (for full-time employees). Individual pay decisions are ultimately based on a number of factors, including qualifications for the role, experience level, skillset, geography, and balancing internal equity. Forus is an equal opportunity employer and does not discriminate on the basis of race, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition, or any other basis protected by law.