Chief Information Security Officer

The role

The Chief Information Security Officer will own the enterprise security strategy, risk posture, and security and privacy program. This role involves partnering with executive leadership and engineering to embed security into AI workflows, infrastructure, and business operations.

What you will do

• Own enterprise security strategy, risk posture, and roadmap
• Advise executive leadership on material risks and security investments
• Establish security governance, policies, metrics, and accountability
• Build and scale the security organization
• Set technical security direction for cloud, application, identity, and vulnerability management
• Partner with Engineering and Product to embed security into architecture and deployment
• Establish safeguards for AI-enabled products and workflows
• Oversee DevOps and cloud infrastructure
• Own the security program supporting HITRUST, SOC 2, and regulatory requirements
• Own the security incident response program

Required qualifications

• 12+ years of experience in information security or cybersecurity
• Significant leadership experience at enterprise or high-growth technology companies
• Experience operating at CISO, VP of Security, or equivalent senior leadership level
• Track record of building and scaling security programs
• Deep technical understanding of cloud security, application security, identity and access management, vulnerability management, and incident response
• Experience owning or leading HIPAA and SOC 2 program success
• Experience protecting sensitive or regulated data and translating compliance requirements into technical controls
• Experience leading enterprise customer security reviews and communicating risk to senior stakeholders
• Ability to influence executive leadership and cross-functional teams

Nice to have

• Experience at a high-growth healthcare technology, healthcare AI, life sciences technology, or enterprise SaaS company
• Experience securing AI-enabled applications, LLM-based systems, AI agents, or platforms handling sensitive healthcare data
• Experience with HITRUST, NIST Cybersecurity Framework, or NIST AI Risk Management Framework
• Experience presenting security posture and investment recommendations to a board or board-level committee
• Hands-on experience leading or working closely with DevOps, SRE, or platform engineering teams
• Relevant certifications such as CISSP, CISM, or CCSP

Benefits

• Competitive salaries
• Equity packages
• Medical insurance
• Dental insurance
• Vision insurance
• Flexible working hours
• Hybrid work options

About the company

Qualified Health is redefining what's possible with Generative AI in healthcare. Their infrastructure provides guardrails for safe AI governance, healthcare-specific agent creation, and real-time algorithm monitoring.