Head of IT & Security

<div class="content-intro"><p><strong>About NexHealth</strong></p> <p>Our healthcare system remains frustratingly analog. When you live in a world of one-tap car rides, instant meal delivery, and unlimited streaming, why do you still have to call to schedule a doctor’s appointment and fill out a clipboard in the waiting room?</p> <p>NexHealth’s mission is to <strong>accelerate innovation in healthcare</strong> by connecting patients, providers, and developers.&nbsp;We’re building the <strong>infrastructure layer for modern healthcare, </strong>connecting thousands of fragmented, on-premise, and closed EHR systems into a single, modern platform that powers software, APIs, payments, and patient experiences across the ecosystem.</p> <ul> <li>Founded: 2017</li> <li>Headquarters: San Francisco, CA</li> <li>Funding: $177M Series C&nbsp;</li> <li>Employees: 200+</li> <li>Trusted by tens of thousands of providers and hundreds of health-tech developers — forging the infrastructure layer that modern healthcare needs</li> </ul></div><h1><span style="font-size: 10pt;"><strong>About the Role</strong></span></h1> <p><span style="font-size: 10pt;">NexHealth is a technology company building infrastructure that's reshaping how patient data moves and how the HealthTech ecosystem connects. We're looking for a Security Lead to own our security governance, compliance, IT operations, vendor security, and incident response — establishing the function, embedding strong practices, and partnering closely with engineering, legal, and leadership.</span></p> <p><span style="font-size: 10pt;">This is a player-coach role with real hands-on expectation in year one. You'll drive the next phase of our security and compliance program, and build your team.</span></p> <h1><span style="font-size: 10pt;"><strong>What You'll Do</strong></span></h1> <ul> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Own NexHealth's security governance, compliance, and IT programs end-to-end.</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Serve as named Information Security Officer and Privacy Officer for SOC 2 and HIPAA — own the policy manual (40+ documents), audit liaison relationship with A-LIGN, control mapping across overlapping regimes, and evidence collection pipelines.</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Set security standards across application security, vulnerability management, cloud security (AWS), audit logging, and access controls — driving the