Vice President, Information Security

This is a fully remote position, open to applicants in United States.

📋 Description

• Take charge of Stellar’s enterprise security strategy, ensuring alignment with business goals, regulatory requirements, and customer needs.

• Deliver regular updates to the CCO and executive leadership regarding AI and traditional risk profiles, program maturity, investment priorities, and emerging threats.

• Provide security insights for the CCO’s reports to the Board.

• Drive the advancement of Stellar’s threat-based risk model.

• Manage the security budget and resource distribution; create and justify investment proposals aimed at risk reduction and revenue facilitation.

• Establish security benchmarks across cloud security, application security, endpoint protection, and identity and access management.

• Perform security architecture evaluations, risk assessments, incident response, and customer security assessments.

• Oversee third-party and cyber risk management, including vendor criteria for PHI access and coordination of cyber insurance.

• Manage incident response and business continuity preparedness, including routine testing.

• Conduct security due diligence for strategic collaborations, payor partnerships, and potential acquisitions.

• Facilitate customer security evaluations, enterprise due diligence responses, and security posture presentations to health plan CISOs and procurement teams.

• Ensure adherence to federal and state security and privacy regulations.

• Lead the preparation for HITRUST audits and address any findings.

• Keep abreast of evolving regulations, including AI governance frameworks and state-level health data privacy laws.

• Develop responsible AI security practices and establish security guidelines for AI projects.

• Set and enforce security standards for organizational AI tools, including PHI management and data classification requirements.

• Design the operating model and organizational structure of the security function; recruit, mentor, and manage the security team.

• Foster security awareness through training and collaboration with Engineering and Product teams.

• Define success metrics for the security function and report on measurable advancements.

• Report to the Chief Compliance Officer and collaborate with the CTO and leaders across Engineering, Product, Operations, Legal, and People.

⛳️ Requirements

• Over 13 years of progressive experience in information security.

• At least 5 years in a senior leadership role (Senior Director or higher) responsible for security strategy and/or operations within a software product organization.

• Extensive knowledge of healthcare or health-tech security.

• Practical experience navigating HIPAA, HITRUST, and regulatory standards for organizations managing PHI and payor data.

• Proficiency in threat-based or risk-based security frameworks.

• Experience in hiring, developing, and leading a small, high-performing security team in a fast-growing software product environment.

• Strong executive presence with a capacity to influence peers, present to boards of directors, and engage with customers.

• Experience managing security in SaaS-first, cloud-native environments; preferably AWS.

• Proven ability to personally adopt AI tools and drive AI adoption within a team.

• Expertise in AI/ML security, encompassing data governance, model security, and third-party AI risk assessment.

• Strong problem-solving skills with the ability to challenge senior executives while achieving consensus.

• Capability to manage senior stakeholders across Engineering, Product, Finance, Legal, People, and Compliance.

• Experience in managing a security budget and making resource allocation decisions.

• Led security due diligence for M&A, strategic partnerships, and the launch of new business lines.

• CISSP, CISM, or similar certifications are advantageous.

• HITRUST Certified CSF Practitioner (CCSFP) is a plus.

• HITRUST audit management experience is an added benefit.

• Familiarity with CMS data handling requirements and government payor security expectations is a plus.

🏝️ Benefits

• Medical, Dental and Vision Benefits.

• Flexible PTO.

• Universal Paid Family and Caregiver Leave.

• Wellhub+ Gym Memberships.

• Pre-tax commuter benefits, HA, FSA plans.

• Company sponsored One Medical memberships and Citibike memberships.

• Medical Travel Benefits.

• JOON, a flexible lifestyle spending account that provides our team with a monthly stipend to spend on what matters most to them.

• Stock Options.

• 401k matching program.

• Company sponsored social events for both in-office and remote employees.

• Company sponsored lunch for all NY HQ employees.