Startups

Vice President, Information Security and IT

Gravie · Remote · Remote

← All jobs
About Gravie

Gravie is a health benefits platform that offers insurance services. Their software products include Comfort and ICHRA. Gravie designed health benefits to help employers control costs. Backed by AXA Venture Partners.

About the role

We are seeking a Vice President of Information Security and IT to build and lead the cybersecurity and corporate IT functions for a growing healthcare company. The VP will set the strategy and priorities for both functions, protecting company information while delivering reliable technology that enables our employees and the business.

What they're looking for

  • Significant cybersecurity experience, including senior leadership of a company-wide security program
  • Direct cybersecurity leadership experience in a HIPAA-regulated healthcare organization, with deep, practical knowledge of the HIPAA Security Rule and protecting ePHI in a covered entity or business associate environment
  • A record of building or improving a security program in a startup, scale-up, or other fast-moving organization with limited resources and changing priorities
  • Strong technical knowledge of cloud security, identity and access management, product and application security, information protection, incident response, vendor risk, and resilience
  • Experience working with Product and Engineering teams in cloud-based software environments
  • Experience with HITRUST, SOC 2, healthcare audits, and security reviews for enterprise customers
More about this role

Hi, we’re Gravie. Our mission is to create health benefits that actually benefit small and midsize businesses and their employees. Our innovative benefit solutions and services are developed and delivered by a diverse group of unique people. We encourage you to be your authentic self - we like you that way.

We are seeking a Vice President of Information Security and IT to build and lead the cybersecurity and corporate IT functions for a growing healthcare company. The VP will set the strategy and priorities for both functions, protecting company information while delivering reliable technology that enables our employees and the business.

The VP will lead the company’s cybersecurity, AI governance, and corporate IT functions. Cybersecurity includes HIPAA and ePHI security, threat detection and response, product and cloud security, and audits and certifications. AI governance will be developed in partnership with Legal, Compliance, Privacy, Product, and Engineering to support the safe and responsible use of AI. Corporate IT includes workforce technology, identity and access, endpoints, collaboration tools, business systems and applications, employee support, and the use of...

Read the full posting on Gravie's site ↗

Engineering

Build your edge while you search

Free tools for founders and investors, plus VC Unfiltered, our take on startups, venture and the people who build them.