Vice President, Information Security

Stellar Health

. Own Stellar’s enterprise security strategy, aligning it with business objectives, regulatory obligations, and customer expectations .

Posted 10/15/2026full-timeRemote • United StatesLead💰 $290,000 - $330,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in enterprise security strategy, particularly within healthcare and health-tech environments, while ensuring compliance with regulatory requirements such as HIPAA and HITRUST. Proven ability to lead high-performing security teams, manage budgets, and influence executive stakeholders effectively.

Highest-signal resume keywords

Enterprise Security StrategyHealthcare Security ExpertiseHITRUST Audit ManagementThreat-Based Risk FrameworksAI/ML Security

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information SecurityRisk AssessmentIncident ResponseSecurity Architecture ReviewsCloud SecurityApplication SecurityEndpoint ProtectionIdentity and Access ManagementSecurity Budget ManagementData Governance

Soft Skills

Executive PresenceProblem-SolvingInfluencing PeersTeam LeadershipStakeholder Management

Tools & Technologies

AWSSaaSAI ToolsCyber Insurance CoordinationPHI Handling

Certifications & Qualifications

CISSPCISMHITRUST Certified CSF Practitioner (CCSFP)

Industry Keywords

HIPAAHITRUSTPHICyber Risk ManagementHealth Data Privacy Laws

Tech Stack

Tools & technologies

AWSCloud

About the role

Key responsibilities & impact

Own Stellar’s enterprise security strategy, aligning it with business objectives, regulatory obligations, and customer expectations
Provide regular reporting to the CCO and executive leadership on AI and traditional risk postures, program maturity, investment priorities, and emerging threats
Provide security expertise behind the CCO’s reporting to the Board
Lead the evolution of Stellar’s threat-based risk model
Own the security budget and resource allocation; build and defend investment cases tied to risk reduction and revenue enablement
Set security standards across cloud security, application security, endpoint protection, and identity and access management
Conduct security architecture reviews, risk assessments, incident response, and customer security reviews
Own third-party and cyber risk management, including vendor standards for PHI access and cyber insurance coordination
Own incident response and business continuity readiness, including regular testing
Lead security due diligence for strategic partnerships, payor relationships, and potential acquisitions
Lead customer security reviews, enterprise due diligence responses, and security posture presentations to health plan CISOs and procurement teams
Ensure compliance with federal and state security and privacy laws
Lead preparation for HITRUST audits and remediation of findings
Monitor evolving regulations, including AI governance frameworks and state-level health data privacy laws
Develop responsible AI security practices and establish security guardrails for AI initiatives
Set and enforce security standards for organizational AI tools, including PHI handling and data classification requirements
Design the security function’s operating model and organizational structure; hire, develop, and lead the security team
Build security awareness through training and embedded partnerships with Engineering and Product
Define success metrics for the security function and report measurable progress
Report to the Chief Compliance Officer and partner with the CTO and leaders across Engineering, Product, Operations, Legal, and People

Requirements

What you’ll need

13+ years of progressive experience in information security
At least 5 years in a senior leadership role (Senior Director or above) owning security strategy and/or operations in a software product organization
Deep expertise in healthcare or health-tech security
Hands-on experience navigating HIPAA, HITRUST, and regulatory requirements for companies handling PHI and payor data
Experience with threat-based or risk-based security frameworks
Experience hiring, developing, and leading a small, high-performing security team in a high-growth software product environment
Strong executive presence and experience influencing peers, presenting to boards of directors, and speaking with customers
Experience managing security in SaaS-first, cloud-native environments; AWS preferred
Demonstrated ability to personally adopt AI tools and lead AI adoption across a team
Depth in AI/ML security, including data governance, model security, and third-party AI risk assessment
Strong problem-solving skills and ability to challenge senior executives while reaching alignment
Ability to manage senior stakeholders across Engineering, Product, Finance, Legal, People, and Compliance
Experience owning a security budget and making resource allocation decisions
Experience leading security due diligence for M&A, strategic partnerships, and new business line launches
CISSP, CISM, or similar certifications are a bonus
HITRUST Certified CSF Practitioner (CCSFP) is a bonus
HITRUST audit management experience is a bonus
Experience with CMS data handling requirements and government payor security expectations is a bonus

Benefits

Comp & perks

Medical, Dental and Vision Benefits
Flexible PTO
Universal Paid Family and Caregiver Leave
Wellhub+ Gym Memberships
Pre-tax commuter benefits, HA, FSA plans
Company sponsored One Medical memberships and Citibike memberships
Medical Travel Benefits
JOON, a flexible lifestyle spending account that gives our team a monthly stipend to spend on what matters most to them
Stock Options
401k matching program
Company sponsored social events for in-office and remote employees
Company sponsored lunch for all NY HQ employees