VP, Security & Compliance

Our mission: Healthie powers virtual-first care delivery while improving access to healthcare and enabling better healthcare outcomes through technology.

We build infrastructure that all healthcare organizations need to perform virtual-first care. Between our EHR, scheduling, and patient engagement solutions, Healthie’s API-first approach makes it easy for organizations of every size to build, customize, and scale their business.

Today, we power thousands of organizations – ranging from small private practices, to digital health startups and multi-billion-dollar healthcare companies. Leveraging Healthie, our customers deliver care to millions of patients, across the full spectrum of healthcare services – from preventative health & wellness to complex chronic care management. 

We believe that the future of healthcare delivery is virtual-first, longitudinal, and collaborative. Learn more at https://www.gethealthie.com/

Healthie is hiring an exceptional VP, Security and Compliance to develop and implement industry-leading, comprehensive security and compliance frameworks, policies, and programs to safeguard our organization's data, systems, and networks.

Responsibilities: What you’ll be doing and held accountable for:

• Enable Healthie’s Continued Strong Security and Compliance Posture:
  • Develop and implement an organization-wide information security strategy aligned with business objectives and industry best practices.
  • Ensure Healthie’s continued compliance with relevant laws, regulations, and industry standards related to information security, such as HIPAA, SOC-2, HITRUST, PCI-DSS, etc which includes regular external testing for each.
  • Collaborate with team members across IT and Application Security to ensure a unified strong security and compliance posture. 
  • Provide regular updates and reports to executive leadership, the board of directors, and other stakeholders on the organization's security posture, threats, incidents, and risk mitigation efforts.
• Develop and Implement Healthie’s Security and Compliance Policies:
  • Establish and enforce information security policies, standards, and procedures to protect against cyber threats and ensure regulatory compliance.
  • Oversee the design, implementation, and maintenance of secure information systems, networks, and infrastructure.
  • Promote a culture of security awareness across the organization through training programs, workshops, and communication initiatives.
  • Lead Healthie’s 3rd party audit process for HIPAA, SOC-2, and other required frameworks.
  • Collaborate with sales, success, and support to ensure customer questions around security and compliance are answered.
• Proactively manage risks, prevent incidents, and generate response plans: 
  • Lead risk management efforts to identify, assess, and prioritize security risks and vulnerabilities, and develop strategies to mitigate and manage them effectively.
  • Lead proactive incident planning and response efforts  coordinating with internal teams and external stakeholders to prevent and remediate incidents
  • Manage Healthie’s third-party vendor assessments and relationships
  • Support Healthie’s customers with completion of third-party security risk assessments 
    
    

Qualifications: What we expect from you:

• You have a track record of success: 5+ years of relevant InfoSec work experience
• You know Healthcare: You’ve built out a Security and Compliance function at another healthcare or software organization, and understand the specific intricacies of operating in healthcare 
• You build and execute roadmaps: You partner with engineering and product teams to influence roadmaps and know how to organize input from stakeholders to determine business objectives, and you can translate them to value-added system requirements and technology roadmaps.
• You are proactive with solutioning: You can operate independently and within a team to ensure we’re continuously meeting (and exceeding) industry standards 
• Strong interpersonal and leadership skills: You care about people - your colleagues, our customers, and everyone around you. People want to work for and with you. You lead with influence, not authority.
• Exceptional communication skills, both written & verbal.
• Grit: You have a bias towards execution. You maniacally focus on getting the job done, and nothing slows you down. 
• Mission driven: You have a passion for healthcare and wan