Vice President, Information Security and IT

Gravie

. Set cybersecurity and corporate IT strategies, priorities, and plans based on company goals, regulatory requirements, and risks .

Posted 9/24/2026full-timeRemote • United StatesLead💰 $261,000 - $348,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in cybersecurity leadership, particularly in HIPAA compliance and ePHI protection, while effectively managing security programs and incident responses. Proficient in cloud security, identity management, and AI governance to enhance organizational resilience and productivity.

Highest-signal resume keywords

Cybersecurity LeadershipHIPAA Security Rule ExpertiseCloud Security ManagementAI GovernanceIncident Response Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cybersecurity StrategyRisk ManagementVulnerability ManagementIdentity SecuritySecurity ArchitectureIncident ResponseData ProtectionSecurity AuditsRegulatory ComplianceBusiness Continuity Planning

Soft Skills

LeadershipCommunicationTeam DevelopmentCrisis ManagementVendor Management

Tools & Technologies

Business ApplicationsAutomation ToolsAPIsCloud EnvironmentsSecurity Tools

Certifications & Qualifications

HITRUSTSOC 2

Industry Keywords

EPHIHealthcare ComplianceCybersecurity FrameworksEnterprise Risk ManagementSecurity Incident Response

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Set cybersecurity and corporate IT strategies, priorities, and plans based on company goals, regulatory requirements, and risks
Establish security policies and controls and work with Enterprise Risk Management to identify, track, report, and address cybersecurity risks
Lead the HIPAA Security Rule program and protect ePHI and sensitive information through its lifecycle
Build capabilities in threat detection and response, identity security, security architecture and engineering, product and cloud security, vulnerability management, vendor security, security awareness, and physical security standards
Partner with Product, Engineering, and Platform teams to embed security in software, cloud environments, APIs, integrations, and production systems
Lead AI governance, including acceptable-use rules, AI-tool review and approval, data-handling requirements, risk assessments, and monitoring
Lead significant security incident response and establish cyber-resilience and technology-recovery requirements
Partner with ERM and business continuity owners on crisis planning and recovery testing
Oversee HITRUST, SOC 2, cybersecurity requirements, audits, regulatory reviews, and customer security assessments
Keep executive leadership and the Board informed about material risks, incidents, program performance, and investment needs
Represent the security program with customers, auditors, and regulators
Improve business processes and productivity through business applications, integrations, automation, and AI
Manage security and IT budgets, vendors, technology investments, team development, and performance

Requirements

What you’ll need

Significant cybersecurity experience, including senior leadership of a company-wide security program
Direct cybersecurity leadership experience in a HIPAA-regulated healthcare organization
Deep, practical knowledge of the HIPAA Security Rule and protecting ePHI in a covered entity or business associate environment
Experience building or improving a security program in a startup, scale-up, or other fast-moving organization with limited resources and changing priorities
Strong technical knowledge of cloud security, identity and access management, product and application security, information protection, incident response, vendor risk, and resilience
Experience working with Product and Engineering teams in cloud-based software environments
Experience with HITRUST, SOC 2, healthcare audits, and security reviews for enterprise customers
Experience leading corporate IT for a distributed workforce, including business applications, endpoints, identity, employee support, and IT service delivery
Practical experience with AI governance and with using business applications, automation, integrations, APIs, and AI tools to improve workflows and productivity across a company
Strong leadership and communication skills, including experience developing teams, managing budgets and vendors, handling major incidents, and presenting risks and recommendations to executives and the Board
Authorization to work in the United States is required
Must answer whether employer visa sponsorship is required

Benefits

Comp & perks

Offers equity
Offers bonus
Alternative medicine coverage
Flexible PTO
Up to 16 weeks paid parental leave
Paid holidays
401k program
Transportation perks
Education reimbursement
2 days of paid paw-ternity leave
Standard health and wellness benefits