Vice President, Information Security and IT
Gravie · Remote · Remote ·
COMPENSATION
$261k – $348k
Listed on the employer's job board (Ashby)
- VP Level Leadership
- Healthcare & HIPAA Focus
- AI Governance Strategy
- Fully Remote Setup
- Startup Environment
Lead the cybersecurity and corporate IT strategies for Gravie, a healthcare benefits company serving small and midsize businesses. You will protect sensitive health data, manage AI governance, and ensure reliable technology operations for a distributed workforce.
This player-coach position requires hands-on involvement in security architecture and IT delivery while setting strategic direction. You will partner with executive leadership to balance risk management with business growth in a fast-paced scale-up setting.
What you'll do
- Define cybersecurity and IT strategies aligned with business goals and regulatory needs
- Manage HIPAA Security Rule programs and protect electronic protected health information
- Build capabilities in threat detection, identity security, and cloud security architecture
- Partner with engineering teams to integrate security into software and cloud environments
- Establish AI governance frameworks including tool approval and data handling rules
- Lead incident response efforts and coordinate crisis planning with business continuity owners
- Oversee HITRUST and SOC 2 audits, regulatory reviews, and customer security assessments
- Report material risks and program performance to executive leadership and the Board
- Drive productivity improvements through business applications, automation, and AI tools
- Manage budgets, vendors, and team development for security and IT functions
What you'll need
- Senior leadership experience managing company-wide cybersecurity programs
- Direct experience leading security in HIPAA-regulated healthcare organizations
- Deep practical knowledge of HIPAA Security Rule and ePHI protection
- Proven track record building security programs in startups or scale-ups
- Strong technical expertise in cloud security, IAM, and incident response
- Experience collaborating with product and engineering in cloud-based software
- Familiarity with HITRUST, SOC 2, and enterprise customer security reviews
- Background leading corporate IT for distributed workforces and endpoints
- Practical experience with AI governance and workflow automation tools
- Strong communication skills for presenting risks to executives and the Board
Stack
- HIPAA
- HITRUST
- SOC 2
- Cloud Security
- Identity Access Management
- AI Tools
How you'll work
- Remote-friendly environment for distributed workforce
- Fast-paced startup and scale-up culture
- Non-hierarchical and merit-driven team structure
What you get
- Standard health and wellness benefits included
- Coverage for alternative medicine treatments
- Flexible paid time off policy
- Up to 16 weeks paid parental leave
- 401k retirement program available
- Transportation perks provided
- Education reimbursement opportunities
- Two days of paid paw-ternity leave