Chief Information Security Officer

Role overview Own the security strategy, risk posture, and privacy-focused security program for an AI platform used in healthcare settings. This executive role combines organization-wide leadership with technical direction, partnering across engineering, product, legal, and commercial teams to protect sensitive information, support compliance, and maintain customer confidence as the platform grows.

Responsibilities - Set security strategy, roadmap, governance, policies, metrics, and accountability; advise executives on risks and investments. - Build and scale the security organization, capabilities, and external partnerships. - Direct application, cloud, identity, vulnerability, and secure development practices, embedding security throughout product delivery and operations. - Establish protections for sensitive health information across AI integrations, agents, data pipelines, and connected systems. - Lead security assurance for healthcare compliance programs, audits, remediation, vendor risk, and enterprise customer reviews. - Own incident response and resilience planning, including investigation, recovery, exercises, and coordination with relevant internal and external parties.

Requirements - Twelve or more years in information security or cybersecurity, including substantial leadership experience. - Experience at CISO, VP of Security, or equivalent level with responsibility for enterprise strategy, risk, and executive engagement. - Record of building and scaling security programs, teams, governance, controls, and technical capabilities. - Deep understanding of cloud and application security, identity and access management, vulnerability management, and incident response. - Experience leading HIPAA and SOC 2 controls, audit readiness, and remediation, and protecting regulated data through practical technical controls. - Ability to lead customer security reviews and influence executives and cross-functional teams while balancing risk and business needs.

Nice to have - Experience in healthcare technology, healthcare AI, life sciences technology, or enterprise SaaS. - Security work involving AI applications, language models, agents, or sensitive healthcare data; familiarity with HITRUST or NIST frameworks. - Board-level security reporting, close work with DevOps/SRE/platform teams, or certifications such as CISSP, CISM, or CCSP.

Benefits and work setup Hybrid work options and flexible hours are listed, along with equity and medical, dental, and vision benefits. The stated pay range is $260,000–$330,000, depending on qualifications, experience, and location.