VP of Information Security – IT

This is a fully remote position, open to applicants in Texas.

📋 Description

• Lead and implement a thorough information security and IT strategy that encompasses Governance, Risk & Compliance, Security Operations, and Enterprise IT.

• Take ownership of the design, execution, and ongoing enhancement of the organization’s information security program.

• Collaborate across all business functions to ensure that security practices are integrated into every level of the organization.

• Manage IT operations, including helpdesk, system administration, and physical network administration, ensuring reliability and security throughout the environment.

• Develop the strategy and roadmap for enterprise applications and infrastructure, focusing on identity and access management; assess and govern the use of AI-driven productivity and business tools.

• Oversee vulnerability management processes including prioritization, remediation tracking, and SLA enforcement; utilize AI tools to enhance detection coverage and triage efficiency.

• Direct incident response efforts, coordinating cross-functional teams, managing communications, and leading post-incident evaluations.

• Manage security and IT vendor partnerships, contracts, and budgets, including forecasting and making investment recommendations.

• Provide regular updates to executive leadership regarding program status, key risks, and strategic priorities.

• Lead, mentor, and develop a team that spans security and IT, managing priorities, workload, and career progression across both operational and strategic initiatives.

⛳️ Requirements

• Bachelor’s degree in a relevant field or equivalent experience.

• A minimum of 10 years in information security, with at least 5 years in a leadership capacity.

• Proven experience overseeing a GRC program and TPRM function.

• Practical background in Security Operations, vulnerability management, and incident response.

• Experience leading an IT department and managing vendor relationships.

• Proficient in presenting security topics to both executive and non-technical audiences.

• Expertise with SIEM and EDR/XDR platforms; familiarity with code scanning tools (Snyk, Semgrep, Checkmarx, etc.).

• Knowledge of cloud security (AWS, GCP, Azure), IAM platforms, and network infrastructure.

• Familiarity with NIST CSF, ISO 27001, SOC 2, HIPAA, and CIS Controls.

• Hands-on experience utilizing AI tools for security monitoring and workflow automation; knowledge of securing LLM deployments, agentic workflows, and AI harness/orchestration security.

• Ability to evaluate risk and formulate policy guidance for AI-driven workforce tools.

🏝️ Benefits

• Curative Health Plan (100% employer-covered medical premiums for you and 50% coverage for dependents on the base plan.)

• $0 copays and $0 deductibles (with completion of our Baseline Visit)

• Preventive and primary care included

• Mental health support (Rula, Televero, Two Chairs, Recovery Unplugged)

• One-on-one care navigation

• Chronic condition programs (diabetes, weight, hypertension)

• Maternity and family planning support

• 24/7/365 Curative Telehealth

• Pharmacy benefits

• Comprehensive dental and vision coverage

• Employer-provided life and disability coverage with additional supplemental options

• Flexible spending accounts

• Flexible work options: remote and in-person opportunities

• Generous PTO policy plus 11 paid annual company holidays

• 401K for full-time employees

• Generous up to 8–12 weeks paid parental leave, based on role eligibility.

• This role is eligible for an annual discretionary bonus structure and company equity.