Head of IT & Cybersecurity

• Develop and execute the company's IT and security strategy, ensuring alignment with overall business objectives and growth goals. Provide vision and direction for the organization's technical infrastructure and security posture
• Oversee the design, implementation, and maintenance of all IT infrastructure, including networks, servers, cloud platforms, and hardware
• Manage the IT team and day-to-day operations, including helpdesk support, system administration, and software management to ensure employees have seamless access to the tools, equipment, and support they need to do their jobs
• Conduct regular risk assessments and vulnerability testing to identify potential security gaps and develop mitigation strategies
• Oversee security incident detection, response, and recovery plans, ensuring minimal disruption in the event of a breach
• Maintain technical controls such as firewalls, intrusion detection systems, access controls, and encryption
• Manage all internal and external IT audit processes, and ensure compliance with relevant laws, regulations, and industry standards, including HIPAA, SOC 2, and others
• Lead and mentor a lean, high-performing IT and security team while continuing to be a hands-on operator

• 8-12+ years of experience leading small but effective IT and security teams within highly regulated industries (e.g. healthcare and financial services)
• Extensive experience with major cloud infrastructure platforms, including AWS, and managing both internally developed software and third-party, cloud-based SaaS platforms
• Proven success in defining, building, and scaling IT and cybersecurity functions from the ground up in a high-growth environment
• Demonstrated experience in consistently achieving and maintaining IT and security certifications across multiple frameworks (e.g. HIPAA, SOC 2, HITRUST, ISO 27001, etc.) with clean, unqualified audit opinions
• Strong knowledge of the major domains of security, including endpoint protection, identity and access management (IAM), network security, data encryption/data loss prevention (DLP), etc.
• Confidence and proven ability to handle major security breaches, complex regulatory audits, and business continuity scenarios
• Familiarity with implementing and maintaining leading IT operations and security infrastructure platforms including Zscaler, Okta, FileWave, Freshworks, SentinelOne, and others
• Prior startup experience in a highly regulated industry (Healthtech, Fintech, etc.)
• Owned IT and Help Desk for an entire company
• History of successful SOC 2 audits
• Experience managing a small IT team

Prior experience scaling a high-growth startup as the first/sole member of the IT team is preferred

Offers Equity