Healthcare Compliance & Enterprise Trust

• Own the security program supporting HITRUST, SOC 2, and applicable customer and regulatory requirements, including control design, audit readiness, and ongoing effectiveness.
• Partner with Legal, Privacy, Engineering, and business leaders to translate contractual and regulatory obligations into practical controls.
• Serve as the senior security counterpart to health system and pharmaceutical customers, leading security diligence, technical assessments, and escalations.
• Partner with Commercial and Customer Success to resolve security-related deal blockers and build confidence in Qualified Health's security posture.
• Evaluate third-party and vendor risks, and determine when additional frameworks or certifications, such as HITRUST, are warranted.

Incident Response & Operational Resilience

• Own the security incident response program, including detection, escalation, investigation, containment, recovery, and post-incident remediation.
• Establish and test incident response, business continuity, and disaster recovery plans, coordinating with executive leadership, Legal, customers, and external specialists when needed.
• Support the Privacy Team in meeting HIPAA and state privacy law reporting obligations with robust risk assessments, incident response, and audit readiness processes.
• Build the operating model, tools, processes, and external partnerships needed to maintain effective security operations as the company scales.
• Drive security awareness and clear security ownership across Engineering, IT, and other business functions.

Required Qualifications

• 12+ years of experience in information security or cybersecurity, including significant leadership experience at enterprise or high-growth technology companies.
• Experience operating at CISO, VP of Security, or equivalent senior leadership level, with accountability for enterprise security strategy, risk management, and executive engagement.
• Track record of building and scaling security programs, including foundational controls, governance, technical capabilities, and teams.
• Deep technical understanding of cloud security, application security, identity and access management, vulnerability management, and incident response.
• Experience owning or leading HIPAA and SOC 2 program success, including control implementation, audit readiness, and remediation.
• Experience protecting sensitive or regulated data and translating compliance requirements into effective technical controls.
• Experience leading enterprise customer security reviews and communicating security posture and risk to senior stakeholders.
• Ability to influence executive leadership and cross-functional teams while balancing risk management with business priorities.

Desirable Qualifications

• Experience at a high-growth healthcare technology, healthcare AI, life sciences technology, or enterprise SaaS company.
• Experience securing AI-enabled applications, LLM-based systems, AI agents, or platforms handling sensitive healthcare data.
• Experience with HITRUST, NIST Cybersecurity Framework, or NIST AI Risk Management Framework.
• Experience presenting security posture, material risks, and investment recommendations to a board or board-level committee.
• Hands-on experience leading or working closely with DevOps, SRE, or platform engineering teams.
• Relevant certifications such as CISSP, CISM, or CCSP.

Why Join Qualified Health?

This is an opportunity to join a fast-growing company and a world-class team that is poised to change the healthcare industry. We are a passionate, mission-driven team building a category-defining product. We are backed by premier investors and are looking for founding team members who are excited to do the best work of their careers.

Our employees are integral to achieving our goals, so we are proud to offer competitive salaries with equity packages, robust medical/dental/vision insurance, flexible working hours, hybrid work options, and an inclusive environment that fosters creativity and innovation.

Our Commitment to Diversity

Qualified Health is an equal opportunity employer. We believe that a diverse and inclusive workplace is essential to our success, and we are committed to building a team that reflects the world we live in. We encourage applications from all qualified individuals, regardless of race, color, religion, gender, sexual orientation, gender identity or expression, age, national origin, marital status, disability, or veteran status.

Pay & Benefits

The pay range for this role is between $260,000 and $330,000, and will depend on your skills, qualifications, experience, and location. This role is also eligible for equity and benefits.

Join our mission to revolutionize healthcare with AI. To apply, please send your resume through the application below.