Head of Corporate and Information Security

The role

The Head of Corporate and Information Security will own the security strategy and risk program. This person will build on the existing SOC2 Type 2 program and develop technical security posture across cloud infrastructure, corporate systems, and data protection.

What you will do

• Own Layer's security strategy and risk program
• Develop a risk-based roadmap and identify gaps for ISO 27001 journey
• Define and improve technical security posture in GCP environments
• Protect sensitive PHI and customer data throughout its lifecycle
• Build out detection, incident response, and security operations capabilities
• Own corporate security including employee identity, endpoints, and SaaS applications
• Strengthen human security posture through awareness and training programs
• Work with the Chief Privacy Officer to identify key security risks

Required qualifications

• 7+ years of experience in information security, security engineering, or related roles
• Experience building or materially evolving a security program in a startup or growth-stage technology company
• Strong technical depth in modern cloud environments
• Experience working closely with software engineering and infrastructure teams
• Strong understanding of security operations and incident response
• Experience protecting sensitive data in regulated environments
• Experience with security and compliance frameworks such as SOC 2 and ISO 27001
• Strong risk judgment
• A builder's mindset
• A clear and credible communicator

Nice to have

• Hands-on GCP experience
• Healthcare experience — particularly HIPAA and PHI handling
• Experience leading an organization through ISO 27001 certification

About the company

Layer Health was founded in 2023 by leading machine learning researchers from MIT and Harvard Medical School. The company is building an AI layer to synthesize information from medical records to reduce friction in healthcare.