Vice President, Information Security
Stellar Health · Remote · Remote ·
COMPENSATION
$290k – $330k
Listed on the employer's job board (Ashby)
- VP level role
- Healthcare security focus
- AWS cloud environment
- Lead small team
- US-based company
Stellar Health is looking for an experienced security executive to own the company's information security program. You will define the multi-year roadmap, manage the budget, and serve as the primary security liaison for customers and partners. The role requires balancing regulatory compliance with product innovation in a cloud-native health-tech environment.
What you'll do
- Define and execute enterprise security strategy aligned with business goals
- Report to executive leadership and the Board on risk and program maturity
- Manage security budget and resource allocation for growth
- Set standards for cloud, application, endpoint, and identity security
- Oversee third-party risk management and cyber insurance programs
- Lead incident response, business continuity, and security testing
- Conduct security due diligence for partnerships and acquisitions
- Serve as security counterpart for customer CISOs and procurement teams
- Ensure compliance with federal and state privacy laws and HITRUST
- Establish security guardrails and governance for AI initiatives
- Hire, develop, and lead a high-performing security team
- Foster a security-aware culture across Engineering and Product
What you'll need
- 13+ years in information security with 5+ in senior leadership
- Deep expertise in healthcare security, HIPAA, and HITRUST
- Experience with threat-based or risk-based security frameworks
- Proven track record hiring and leading security teams in SaaS
- Strong executive presence and ability to present to Boards
- Experience managing security in AWS cloud-native environments
- Demonstrated ability to adopt and lead AI tool usage
- Depth in AI/ML security, data governance, and model security
- Ability to influence stakeholders and balance risk with business needs
- Experience owning security budgets and making investment decisions
- Background in security due diligence for M&A and partnerships
Nice to have
- CISSP, CISM, or similar security certifications
- HITRUST Certified CSF Practitioner (CCSFP)
- Experience managing HITRUST audits
- Knowledge of CMS data handling and government payor requirements
Stack
- AWS
- HITRUST
- AI/ML tools
How you'll work
- Reports to Chief Compliance Officer
- Partners with CTO and cross-functional leaders
- Hybrid work model with NY HQ presence
- Small team with opportunity to scale
What you get
- Medical, Dental, and Vision benefits
- Flexible PTO and paid family leave
- Wellhub+ Gym memberships
- One Medical and Citibike memberships
- JOON lifestyle spending account stipend
- Stock options and 401k matching
- Company sponsored social events and lunches