Vice President, Information Security and IT

🔥 1 minute ago

🇺🇸 United States – Remote

💵 $261k - $348k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Gravie

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2013

🏥 Healthcare

🛡️ Insurance

🤝 B2B

💰 $150M Private Equity Round - Gravie on 2025-05

Healthcare • Insurance • B2B

Gravie is a benefits and health insurance solutions company that helps small and midsize employers, brokers, and employees access and administer more flexible, affordable health benefits. Its flagship offerings include Comfort (a level-funded health plan), Gravie ICHRA (Individual Coverage Health Reimbursement Arrangement administration), Gravie Pay (support for healthcare costs), and Gravie Care; the company focuses on enabling SMBs to offer individualized, lower-cost coverage and simplifying benefits administration.

📋 Description

• Set cybersecurity and corporate IT strategies, priorities, and plans based on company goals, regulatory requirements, and risks • Establish security policies and controls and work with Enterprise Risk Management to identify, track, report, and address cybersecurity risks • Lead the HIPAA Security Rule program and protect ePHI and sensitive information through its lifecycle • Build capabilities in threat detection and response, identity security, security architecture and engineering, product and cloud security, vulnerability management, vendor security, security awareness, and physical security standards • Partner with Product, Engineering, and Platform teams to embed security in software, cloud environments, APIs, integrations, and production systems • Lead AI governance, including acceptable-use rules, AI-tool review and approval, data-handling requirements, risk assessments, and monitoring • Lead significant security incident response and establish cyber-resilience and technology-recovery requirements • Partner with ERM and business continuity owners on crisis planning and recovery testing • Oversee HITRUST, SOC 2, cybersecurity requirements, audits, regulatory reviews, and customer security assessments • Keep executive leadership and the Board informed about material risks, incidents, program performance, and investment needs • Represent the security program with customers, auditors, and regulators • Improve business processes and productivity through business applications, integrations, automation, and AI • Manage security and IT budgets, vendors, technology investments, team development, and performance

🎯 Requirements

• Significant cybersecurity experience, including senior leadership of a company-wide security program • Direct cybersecurity leadership experience in a HIPAA-regulated healthcare organization • Deep, practical knowledge of the HIPAA Security Rule and protecting ePHI in a covered entity or business associate environment • Experience building or improving a security program in a startup, scale-up, or other fast-moving organization with limited resources and changing priorities • Strong technical knowledge of cloud security, identity and access management, product and application security, information protection, incident response, vendor risk, and resilience • Experience working with Product and Engineering teams in cloud-based software environments • Experience with HITRUST, SOC 2, healthcare audits, and security reviews for enterprise customers • Experience leading corporate IT for a distributed workforce, including business applications, endpoints, identity, employee support, and IT service delivery • Practical experience with AI governance and with using business applications, automation, integrations, APIs, and AI tools to improve workflows and productivity across a company • Strong leadership and communication skills, including experience developing teams, managing budgets and vendors, handling major incidents, and presenting risks and recommendations to executives and the Board • Authorization to work in the United States is required • Must answer whether employer visa sponsorship is required

🏖️ Benefits

• Offers equity • Offers bonus • Alternative medicine coverage • Flexible PTO • Up to 16 weeks paid parental leave • Paid holidays • 401k program • Transportation perks • Education reimbursement • 2 days of paid paw-ternity leave • Standard health and wellness benefits