Looking for a job

Adam Megahed

@adammegahed

Director of Security at InVita Healthcare Technologies, where I achieved SOC 2 Type II certification and lead security for a 30+ application SaaS platform.

United States

Message

At InVitaHealthcareTechnologies, I built and direct the enterprise Information Security Program, setting its governance, strategy, and operational oversight across six global business divisions. I lead security for a 30+ application SaaS platform and partner with executives to align investments with business objectives and risk appetite.

I achieved SOC 2 Type II certification and developed governance policies mapped to HITRUST, ISO 27001, GDPR, and HIPAA. I also led deployment of Arctic Wolf SOCaaS to improve threat detection and incident response maturity.

At CircleInternetFinancialRemoteWork, I designed the enterprise Third-Party Risk Management program and led implementation of ProcessUnity and Black Kite. I conducted more than 250 vendor security assessments and redesigned onboarding workflows, reducing assessment turnaround time by 50%.

At BrownAdvisory, I led security programs including vulnerability management, disaster recovery, and third-party risk. I helped obtain ISO 27001:2013 certification, developed the firm's vulnerability and patch management strategy, and established its Business Continuity and Disaster Recovery program.

Experience

Work history, roles, and key accomplishments

Current

Director of Security

Current

InVita Healthcare Technologies

Apr 2025 - Present (1 year 5 months)

Built and directed the enterprise Information Security Program, establishing governance, strategy, and operational oversight supporting SOC 2, HIPAA, ISO 27001, and HITRUST readiness across six global business divisions. Led enterprise deployment of a managed Security Operations capability and achieved SOC 2 Type II certification.

Infosec Governance Risk Management SOC2 HIPAA ISO 27001 HITRUST Security Operations EDR SIEM Vulnerability Management Threat Detection Zero Trust Audit Leadership Security Awareness Business Continuity Disaster Recovery

Senior Security Analyst

Circle Internet Financial

May 2022 - Dec 2024 (2 years 7 months)

Led reviews and ongoing monitoring of over 600 third-party relationships. Designed and implemented the enterprise Third-Party Risk Management program, conducted over 250 vendor security assessments, and led implementation of ProcessUnity and Black Kite.

Third Party Risk Management ProcessUnity Black Kite Vendor Risk Assessment Access Reviews Security Operations Governance Reporting

Security Analyst

Brown Advisory

Jul 2017 - May 2022 (4 years 10 months)

Responsible for enterprise operational security for a 5,000-device environment, directing vulnerability management, business continuity, disaster recovery, vendor risk, security awareness, and strategic security initiatives. Led successful effort to obtain ISO 27001:2013 certification.

Vulnerability Management Disaster Recovery Third Party Risk Endpoint Security Business Resilience Tenable Forescout CyberArk Security Awareness Phishing Simulations ISO 27001 Patch Management

IT Analyst

Brown Advisory

Jan 2017 - Jul 2017 (6 months)

Helped establish the organization's foundational Information Security Program, contributing to governance, policy development, and enterprise security operations. Designed and implemented initial Vulnerability Management and Vendor Management processes.

Vulnerability Management Vendor Management Policy Development IT Policy Exception Risk Register Windows Updates