Head of Security & IT

Burlingame, CA, Remote. Posted 4 days ago

The role

The Head of Security & IT will own security, compliance, and corporate IT functions end to end. This builder role involves setting security strategy, running compliance programs, and managing corporate IT and application security.

What you will do

Own compliance programs including SOC 2 and HIPAA
Drive audit readiness and lead evidence collection
Write, maintain, and enforce security and compliance policies
Manage relationships with auditors and compliance vendors
Manage devices, identity and access management, and SSO
Enforce VPN usage and endpoint protection
Administer core software and SaaS tools
Oversee contractor-delivered IT support
Design, implement, and monitor security controls
Run risk assessments and maintain the risk register

Required qualifications

7+ years in security, IT, or compliance
At least 2 years leading a security or IT function
Direct ownership of a SOC 2 audit from readiness through report
Working knowledge of HIPAA security requirements and handling of protected health information (PHI)
Hands-on experience administering IAM/SSO (e.g., Okta, Google Workspace), MDM, and endpoint protection tools
Experience running vulnerability management, penetration testing programs, and incident-response planning
Experience assessing and managing third-party vendor risk
Comfort being both strategic and hands-on
Clear, confident communication with engineers, executives, auditors, and customers

Nice to have

Experience as the first security or IT hire at a venture-backed startup
Background in healthcare technology, revenue cycle management, or another regulated industry
Familiarity with compliance automation platforms (e.g., Vanta, Drata)
Exposure to cloud security (AWS or GCP) and AI/ML systems handling sensitive data
Relevant certifications such as CISSP, CISM, CISA, or Security+

About the company

SuperDial is an AI company transforming revenue cycle operations by automating complex payer interactions and administrative phone calls. Their voice automation platform handles mission-critical workflows for healthcare organizations.