Vice President, Information Security

The role

The Vice President, Information Security will lead and evolve the company's security program. This role owns the full scope of information security strategy, operations, governance, and budget.

What you will do

• Own enterprise security strategy aligned with business objectives and regulatory obligations
• Provide regular reporting to the CCO and executive leadership on risk postures and emerging threats
• Lead the evolution of the threat-based risk model
• Own the security budget and resource allocation
• Set security standards for cloud security, application security, endpoint protection, and identity and access management
• Perform security architecture reviews, risk assessments, incident response, and customer security reviews
• Own third-party and cyber risk management
• Manage the cyber insurance program
• Own incident response and business continuity readiness
• Lead security due diligence for strategic partnerships and potential acquisitions

Required qualifications

• 13+ years of progressive experience in information security
• At least 5 years in a senior leadership role owning security strategy and/or operations in a software product organization
• Deep expertise in healthcare or health-tech security
• Hands-on experience navigating HIPAA, HITRUST, and regulatory dynamics for PHI and payor data
• Demonstrated experience with threat-based or risk-based security frameworks
• Proven people-management experience leading a small, high-performing security team in a high-growth software product environment
• Strong executive presence with a track record of influencing peers and presenting to boards of directors
• Experience managing security in SaaS-first, cloud-native environments
• Demonstrated ability to personally adopt AI tools and lead AI adoption across a team
• Depth in AI/ML security, including data governance, model security, and third-party AI risk assessment
• Ability to lead through influence and manage key senior stakeholders
• Experience owning a security budget and making resource allocation decisions

Nice to have

• CISSP, CISM, or similar certifications
• HITRUST Certified CSF Practitioner (CCSFP)
• HITRUST audit management experience
• Experience with CMS data handling requirements and government payor security expectations
• AWS preferred

Benefits

• Medical, Dental and Vision Benefits
• Flexible PTO
• Universal Paid Family and Caregiver Leave
• Wellhub+ Gym Memberships
• Pre-tax commuter benefits, HA, FSA plans
• Company sponsored One Medical memberships and Citibike memberships
• Medical Travel Benefits
• JOON, a flexible lifestyle spending account with a monthly stipend
• Stock Options & a 401k matching program
• Company sponsored social events
• Company sponsored lunch for all NY HQ employees

About the company

Stellar Health is a US-based Health-tech company that helps primary care providers put patient health first using a platform of technology, people, and analytics.