Virta Health is on a mission to transform type 2 diabetes and weight-loss care. Current treatment approaches aren’t working—over half of US adults have either type 2 diabetes or prediabetes, and obesity rates are at an all-time high. Virta is changing this by helping people reverse their metabolic condition through innovations in technology, personalized nutrition, and virtual care delivery reinvented from the ground up. We have raised over $350 million from top-tier investors, and partner with the largest health plans, employers, and government organizations to help their employees and members restore their health and take back their lives. Join us on our mission to reverse diabetes and obesity in one billion people.

As Vice President of Information Technology and Security, you will serve as a critical member of the leadership team, responsible for defining and executing the security and IT vision across the organization. You will lead efforts to architect and build secure, scalable systems that power our mission-critical applications, while ensuring that enterprise security and IT operations enable productivity and resilience at scale. This role combines deep technical acumen with strategic oversight and cross-functional leadership.

You’ll be instrumental in enabling our AI efforts to scale securely, allowing developers to focus on solving complex problems without being encumbered by infrastructure or operational and legal risks. Your influence will span from product design to employee experience, making you a key decision-maker in the company’s long-term strategy.

Key Responsibilities

Security Architecture & Product Security

• Lead product and application security strategy, including secure design, development, deployment, and monitoring.
  

• Oversee secure configuration and continuous assessment of cloud environments (GCP), containers, APIs, and developer workflows.
  

• Partner with engineering and product teams to embed secure-by-design practices and eliminate security and privacy risks early in the SDLC.
  

• Drive secure delivery of our AI platform in compliance with regulatory and industry frameworks.
  

Corporate Security & IT Leadership

• Own the full lifecycle of corporate IT, from onboarding to offboarding, including identity management, endpoint protection, and employee enablement.
  

• Build and manage IT policies, practices, and tooling to ensure minimal friction for staff while maintaining rigorous security standards.
  

• Oversee SaaS tool governance, device fleet security, and MDM configuration to protect company assets.
  

• Ensure corporate infrastructure supports remote-first, distributed teams efficiently and securely.
  

Governance, Risk & Compliance

• Lead all aspects of security compliance programs and audits, including HIPAA, HITRUST, SOC 2, and ISO 27001.
  

• Partner with legal, privacy, engineering, and operations to ensure risk assessments, policies, and controls meet evolving regulatory requirements.
  

• Monitor controls for access, vulnerability management, incident response, and business continuity.
  

Team Building & Leadership

• Hire, mentor, and manage high-performing teams across InfoSec, security engineering, and corporate IT.
  

• Cultivate a culture of transparency, ownership, and continuous improvement.
  

• Educate and empower employees on secure practices and foster cross-functional collaboration.
  

Qualifications

We’d love to hear from you if you have:

• 15+ years of IT and cybersecurity experience, including 5+ years in senior leadership roles (VP, Senior Director).
  

• Proven leadership experience in both information security and corporate IT domains.
  

• Demonstrated success securing enterprise applications and platforms, particularly in AI/ML or cloud-native environments.
  

• Hands-on experience with IT framework, and cloud platforms such as Google Cloud Platform (GCP).
  

• Strong knowledge of secure software development practices, CI/CD, and developer enablement.
  

• A track record of successfully managing IT operations, SaaS administration, endpoint security, and helpdesk experience.
  

• Experience leading third-party certifications and audits (e.g., HIPAA, HITRUST, SOC 2, ISO 27001).
  

• Exceptional communication skills, with the ability to explain complex topics to technical and non-technical stakeholders, including Virta’s Executive leadership team and its Board of Director