Head of Security & Compliance

The role

The Head of Security & Compliance will set the security vision and roadmap for a healthcare AI company. This person will personally build the security program, manage compliance audits, and lead cross-functional security outcomes.

What you will do

• Own the overall security strategy and roadmap
• Serve as the security executive to customers, auditors, and partners
• Build a security-aware engineering culture
• Advise leadership, investors, and the board on security risk
• Take ownership of compliance programs including HIPAA and SOC 2
• Gather, organize, and validate audit evidence
• Design and implement security program building blocks like access management and incident response
• Audit and validate cloud, development systems, SaaS tools, and data pipelines
• Own the security and compliance budget
• Own the incident response program

Required qualifications

• Prior experience as a senior security leader at a healthcare technology or health data company of roughly 50 - 1,000 people
• Direct ownership of a HIPAA program and a SOC 2 Type II (or comparable, such as HITRUST or ISO 27001) audit
• Strong working knowledge of cloud security (AWS, Azure, or GCP), identity and access management, and common SaaS security tooling
• Ability to directly review code and infrastructure
• Experience representing security to external audiences including completing security questionnaires and leading review calls
• Excellent written and verbal communication skills
• Comfortable operating with significant autonomy in a fast-moving, resource-constrained startup environment
• Track record of driving security outcomes through cross-functional teams you don’t directly manage

Nice to have

• Experience securing AI/ML systems, LLM-based products, or data pipelines feeding machine learning models
• Knowledge of Python, SQL, and Terraform
• A relevant security certification (e.g., CISSP, CISM, or similar)
• Prior experience transitioning a company from an outsourced or fractional security function to an in-house program

Benefits

• Medical, dental, and vision coverage with 100% of premiums paid for employees and dependents
• Gold medical plan included; option to buy up to Platinum
• 401(k) plan
• 24 days of PTO annually

About the company

Knit Health is building a novel clinical foundation model to improve how healthcare is delivered. The company is venture backed and works with U.S.-based health systems and data providers.