Report to the SVP of Engineering and lead the security function of the organization
Define and execute a long-term security strategy that protects sensitive health data
Build and lead a high-impact security organization, including future GRC, SecOps, and AI-focused security capabilities
Design and evolve a security architecture that protects sensitive health data while enabling rapid product development
Partner closely with Engineering and Data Science teams to embed secure-by-design principles into architecture and the SDLC
Establish clear ownership, accountability, and measurable security outcomes across the organization
Lead the implementation of strong identity, access, and data protection strategies grounded in least-privilege and thoughtful segmentation
Oversee cloud security (AWS), infrastructure hardening, and corporate device management strategy
Partner closely with the Head of AI to strengthen governance and proactively address emerging risks across LLM-powered workflows and AI-enabled products
Lead SOC 2 Type 2 efforts and guide the organization toward HITRUST certification
Serve as a trusted advisor to executive leadership and, as needed, the Board of Directors on security strategy and risk

Requirements

Built and scaled security programs in healthcare or other regulated, sensitive-data environments
Developed and implemented modern cloud security architectures, particularly within AWS
Strengthened identity and access management practices, data protection strategies, and secure SDLC processes
Led or owned SOC 2 programs (HITRUST exposure is a plus, but not required)
Influenced engineering leadership and product strategy to reduce meaningful risk without slowing product velocity
Navigated ambiguity in high-growth startup environments and built systems designed to scale
Established credibility as both a strategic leader and hands-on technical contributor

Benefits

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

security architecturecloud securityidentity and access managementdata protection strategiessecure SDLCSOC 2HITRUSTinfrastructure hardeningGRCSecOps

Soft Skills

leadershipstrategic thinkinginfluencingaccountabilitycommunicationcredibilitynavigating ambiguitycollaborationproblem-solvingadaptability