Head of Security, IT

SuperDial

. Own SuperDial's compliance programs end to end, including SOC 2 and HIPAA and future frameworks .

Posted 11/10/2026full-timeBurlingame • California • United StatesLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in managing compliance programs, including SOC 2 and HIPAA, while effectively leading security initiatives and vendor risk assessments. Proficient in IAM/SSO administration, vulnerability management, and incident-response planning within regulated industries.

Highest-signal resume keywords

SOC 2 Audit OwnershipHIPAA Security RequirementsIAM/SSO AdministrationVulnerability ManagementSecurity Policy Development

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Compliance Programs ManagementRisk AssessmentsIncident-Response PlanningPenetration TestingSecurity MonitoringEndpoint ProtectionVendor Risk ManagementSecurity Awareness TrainingAudit DocumentationCloud Security

Soft Skills

Clear CommunicationLeadershipStrategic ThinkingHands-On ApproachRelationship Management

Tools & Technologies

IAM ToolsSSO SolutionsCompliance Automation PlatformsMDM SolutionsVPN TechnologiesEndpoint Protection ToolsCloud PlatformsSecurity Monitoring ToolsAudit Management SoftwareContract Management Systems

Certifications & Qualifications

CISSPCISMCISASecurity+

Industry Keywords

Healthcare TechnologyRegulated IndustryProtected Health InformationRevenue Cycle ManagementVenture-Backed Startup

Tech Stack

Tools & technologies

AWSCloudGoogle Cloud Platform

About the role

Key responsibilities & impact

Own SuperDial's compliance programs end to end, including SOC 2 and HIPAA and future frameworks
Drive audit readiness and lead evidence collection across the company
Write, maintain, and enforce security and compliance policies
Manage relationships with auditors and compliance vendors
Identify and close compliance gaps
Manage devices, identity and access management (IAM), and SSO across the company
Enforce VPN usage and endpoint protection on company devices
Administer core software and SaaS tools, including provisioning and license management
Oversee contractor-delivered IT support and vendor service standards
Design, implement, and monitor company security controls
Run risk assessments and maintain the risk register
Lead vulnerability management from identification through remediation
Own security monitoring arrangements
Build and test incident-response plans
Run security awareness training for employees and contractors
Own security aspects of onboarding and offboarding with People Ops
Ensure timely access provisioning and removal across systems
Maintain audit-supporting process documentation
Schedule and manage penetration tests with Engineering
Track application security findings and drive remediation to closure
Partner with Engineering on secure development practices
Run vendor security assessments and manage vendor access controls
Track vendor risks and contractual security obligations
Respond to customer security questionnaires and support sales security reviews
Set security strategy and own security, compliance, and corporate IT functions end to end
Partner closely with Engineering on product security
Serve as a point of contact for customers, auditors, and leadership

Requirements

What you’ll need

7+ years in security, IT, or compliance, including at least 2 years leading a security or IT function
Direct ownership of a SOC 2 audit (Type II preferred) from readiness through report
Working knowledge of HIPAA security requirements and handling of protected health information (PHI)
Hands-on experience administering IAM/SSO (e.g., Okta, Google Workspace), MDM, and endpoint protection tools
Experience running vulnerability management, penetration testing programs, and incident-response planning
Experience assessing and managing third-party vendor risk
Comfort being both strategic and hands-on: writing the policy, configuring the tool, and presenting to leadership
Clear, confident communication with engineers, executives, auditors, and customers alike
Experience as the first security or IT hire at a venture-backed startup
Background in healthcare technology, revenue cycle management, or another regulated industry
Familiarity with compliance automation platforms (e.g., Vanta, Drata)
Exposure to cloud security (AWS or GCP) and AI/ML systems handling sensitive data
Relevant certifications such as CISSP, CISM, CISA, or Security+

Benefits

Comp & perks

Growth Mindset — We embrace challenges, continuous learning, and personal development.
Direct & Respectful Feedback — We value candid communication and fast feedback loops without ego.
Speed Matters — We move quickly, iterate often, and thrive in fast-paced environments.
High Standards — We care deeply about quality, details, and making sound decisions.