Role Overview
Gravie is seeking a Vice President of Information Security and IT to build and lead the cybersecurity and corporate IT functions for a growing healthcare company. This remote, full-time position operates as a player-coach role suited for a leader with deep expertise in both healthcare and fast-paced startup or scale-up environments.
Key Responsibilities
Formulate and direct cybersecurity and corporate IT strategies, plans, and priorities aligned with company risks, regulatory mandates, and business objectives.
Oversee the HIPAA Security Rule program, managing the complete lifecycle of ePHI protection from collection to disposal, including risk analysis and audit readiness.
Build and expand capabilities in threat detection, identity security, security architecture, vulnerability management, vendor security, and cloud security.
Collaborate with Engineering and Product departments to integrate security into software, cloud environments, and production systems.
Spearhead AI governance initiatives, establishing rules for acceptable use, data handling, risk assessments, and tool reviews.
Manage responses to major security incidents, establishing technology recovery requirements and participating in business continuity planning.
Oversee external and internal audits, regulatory reviews, customer security assessments, and compliance frameworks such as SOC 2 and HITRUST.
Communicate material risks, program metrics, and budgetary needs to executive leadership and the Board of Directors.
Direct corporate IT operations for a distributed workforce, covering workforce technology, identity and access management, collaboration tools, and employee support.
Manage budgets, technology vendor relationships, and team performance, measuring success through risk reduction and service reliability.
Requirements
Extensive background in cybersecurity, featuring senior leadership experience managing a company-wide security program.
Direct leadership experience within a HIPAA-regulated healthcare environment, with practical knowledge of protecting ePHI.
Proven track record of developing or enhancing security programs within resource-constrained startup or scale-up organizations.
Technical expertise in cloud security, identity and access management, application security, and incident response.
Experience collaborating closely with Product and Engineering teams operating in cloud-based software environments.
Familiarity with HITRUST, SOC 2, healthcare audits, and enterprise customer security reviews.
Background managing corporate IT for distributed teams, including business applications and endpoint support.
Practical experience establishing AI governance and leveraging automation, APIs, and business applications to boost productivity.
Strong communication skills with experience presenting risk assessments and strategic recommendations to executive boards.
Skills and Tools
Cybersecurity Strategy and Risk Management
HIPAA Security Rule Compliance and ePHI Protection
Cloud and Product Security
Threat Detection and Incident Response
Identity and Access Management
AI Governance and Tool Oversight
Corporate IT and Workforce Technology
HITRUST and SOC 2 Frameworks
Salary and Benefits
Annual Salary Range: $261,000 to $348,000 USD
Standard health and wellness benefits alongside alternative medicine coverage
Flexible paid time off (PTO)
Up to 16 weeks of paid parental leave and paid holidays
401(k) retirement program
Transportation perks and education reimbursement
Two days of paid paw-ternity leave
About the Company
Gravie was founded and is led by industry veterans who have successfully launched and expanded multiple market-leading companies in the healthcare sector. The organization is well-capitalized, supported by top-tier investors who share a long-term vision for industry-defining growth. Known for high customer satisfaction ratings that sit significantly above the industry average, Gravie fosters a non-hierarchical, merit-driven, and fast-paced culture centered around making a positive impact.
How to Apply
Interested candidates should submit their application directly through the official Gravie careers page.
