VP, Information Security

VP, Information Security

Brightside Health delivers life-saving virtual mental healthcare to everyone who needs it. We are powered by proprietary AI, purpose-built technology, a world-class clinician network, and a care model that rivals the best of in-person treatment. When combined with precision psychiatry and leading-edge therapeutic techniques, we’re able to improve outcomes for those with mild-to-severe clinical depression, anxiety, and other mood disorders. Our innovative approach has earned recognition from leading publications such as Healthline, Fortune, and Forbes, naming us 'Most Comprehensive,' and 'Best Online Therapy for Anxiety and Depression.'

We take an action-oriented, purposeful approach with everything we do and seek out team members who value collaboration and thoughtful prioritization. As a result, our organization is looking for the brightest and most innovative talent in the industry. We can promise you that, as a member of the Brightside team, you’ll have the opportunity to collaborate alongside smart and driven people while growing your professional skills.

We are seeking an experienced and pragmatic VP of Information Security to report directly to the Chief Technology Officer. This leader will guide both our Information Security and IT functions through a high-growth phase, ensuring the organization maintains strong security, privacy, and compliance standards while continuing to scale efficiently.

This is not a purely managerial role. We are looking for a hands-on, “roll-up-your-sleeves” leader who can operate strategically while also diving into execution when needed. You will serve as a cross-functional enabler, partnering across the business to embed security and compliance into how we build, operate, and innovate.

What you’ll be doing as the VP, Information Security:

Leadership & Strategy

• Lead and develop a high-performing, lean InfoSec and IT team
• Act as a trusted advisor to executive leadership on security, risk, and compliance strategy
• Enable business growth by embedding security as a business enabler, not a blocker
• Translate complex technical risks into clear business impact and decisions

Security, Risk & Compliance

• Maintain and mature HITRUST certification (MyCSF) and SOC 2 Type II attestation
• Own and evolve the organization’s risk management program
• Lead security incident response and continuous improvement of response capabilities
• Oversee vulnerability management, threat detection, and remediation efforts
• Drive vendor risk management and third-party security oversight
• Ensure compliance with HIPAA and other applicable regulatory requirements

Technical Oversight

• Oversee application, infrastructure, and data security across a cloud-first environment
• Manage and optimize SIEM and security monitoring capabilities
• Guide secure architecture decisions in partnership with engineering and product teams
• Support secure scaling of systems during rapid organizational growth

IT & Operational Excellence

• Oversee IT operations to ensure reliable, secure, and high-quality support for employees and clinicians
• Deliver a seamless IT experience for a fully remote workforce and distributed clinician network
• Establish metrics and reporting on security posture, compliance health, and IT performance

Cross-Functional Collaboration

• Partner with Legal, Compliance, Engineering, Product, and Clinical teams to ensure alignment
• Drive a culture of shared responsibility for security and privacy
• Support innovation initiatives while maintaining appropriate risk controls

Requirements:

• Experience leading Information Security in a HIPAA-compliant,