Director of Security – Compliance

Verse

Director of Security & Compliance building and owning security programs for healthcare software company. Leading risk management and compliance as the senior-most security voice in the company.

Posted 6/22/2026full-timeNew York City • New York • 🇺🇸 United StatesLead💰 $220,000 - $270,000 per yearWebsite

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

security strategyrisk reductionHIPAA complianceHITRUST certificationvulnerability managementendpoint protectionlogging and monitoringdetection and responseincident responsesecurity controls

Soft Skills

cross-functional communicationleadershipadvising executiveshands-on coachingteam buildingrisk assessmentpolicy developmentcollaborationproblem-solvingstakeholder engagement

Tools & Technologies

MDMIAMsecurity toolingmonitoring systemsincident response playbooksaudit systemssecurity policiesaccess policiesremediation toolspost-incident review processes

Industry Keywords

information securitycomplianceSOC 2security posturerisk managementsecurity program developmentstartup environmentgrowth-stage companysecurity controls auditingtechnical security controls

About the role

Key responsibilities & impact

Own and drive the company-wide security strategy and roadmap, balancing risk reduction with the speed of a Series C product organization.
Serve as the owner for HIPAA compliance and our ongoing HITRUST certification effort, implementing and operating the underlying controls.
Serve as the senior-most security voice in the company, advising executive leadership on risk posture, security investments, and tradeoffs.
Implement and operate technical security controls: vulnerability management, endpoint protection, logging and monitoring, detection and response.
Lead incident response, including playbook development, on-call structure, tabletop exercises, and post-incident reviews.
Build the security team over time, starting as a hands-on player-coach and hiring once the program scales.

Requirements

What you’ll need

8+ years in security, compliance, or information security, with at least 2–3 years as a senior leader or subject matter expert at a startup or growth-stage company.
Direct experience owning HIPAA, HITRUST, and/or SOC 2 compliance end to end — designing, implementing, operating, and auditing the relevant security controls and policies.
Experience leading incident response, from detection through remediation and postmortem.
Experience designing and implementing both technical and non-technical security controls: MDM, IAM, endpoint protection, access policies, vulnerability management.
Strong cross-functional communication: able to explain risk and compliance requirements to executives, work credibly alongside engineers, and represent our posture to enterprise customers and auditors.
Comfort operating as a player-coach — willing to be hands-on-keyboard while building the function.
Preferred: Track record of building security programs from early maturity: you've written the first policies, stood up the first tooling, and made pragmatic risk tradeoffs rather than inheriting a mature program.

Benefits

Comp & perks

Competitive compensation.
Opportunities for rapid career advancement in a growing company.
100% premium coverage for health insurance.
401(k) with no matching at this time.