# Head of IT & Security

**Company:** [NexHealth](https://hotfix.jobs/companies/nexhealth)
**Location:** Seattle, WA, San Francisco, CA
**Role:** Security Engineering
**Salary:** $175k – $220k/yr
**Experience:** 8+ years
**Skills:** SIEM, Mdr, Ids/Ips, Waf, Dlp, Vulnerability Scanners, SOC 2, HIPAA, AWS, Incident Response
**Posted:** 2026-05-15

> Lead NexHealth's security governance, compliance, IT operations, and incident response. Build and scale the security program and team from the ground up while partnering with engineering and leadership.

## Job Description

## What You'll Do
- Own NexHealth's security governance, compliance, and IT programs end-to-end.
- Serve as named Information Security Officer and Privacy Officer for SOC 2 and HIPAA — own the policy manual (40+ documents), audit liaison relationship with A-LIGN, control mapping across overlapping regimes, and evidence collection pipelines.
- Set security standards across application security, vulnerability management, cloud security (AWS), audit logging, and access controls — driving the technical program through Engineering via influence, not direct authority.
- Build, hire, and develop the IT and workforce security program: endpoints, identity, SaaS administration, phishing simulations, role-specific training modules, and facilities security.
- Own vendor security: intake, classification, assessment, BAA execution, ongoing oversight, and customer-facing trust artifacts including Trust Center and subprocessor disclosure.
- Lead incident response in Officer capacity; partner with outside counsel on breach determinations, own IR tracking, and run annual tabletop exercises.
- Own the risk register, risk acceptance decisions, privacy operations (DSARs, data subject rights, privacy complaints), BC/DR plan, and cyber insurance relationship.
- Hire a Staff-level IT IC within year one and grow the function from there.

## What You'll Bring
- 8+ years of relevant security experience, including 3+ years in a security leadership role where you were materially building the program, not maintaining it.
- Has built (not inherited) a security program from a near-zero baseline at least once.
- Has owned a recurring external audit cycle end-to-end (e.g., SOC 2, ISO, PCI, HITRUST) — designed evidence collection, mapped controls, ran the auditor relationship, and made the next cycle materially easier than the last.
- Software engineering background. Can read a pull request, evaluate cloud configurations, and push back on Engineering with technical substance.
- Experience hiring and developing senior security or IT individual contributors.
- Hands-on experience with security tools and technologies such as SIEM, MDR, IDS/IPS, WAF, DLP, and vulnerability scanners.
- You've reshaped how a company engages with auditors, regulators, or customer security teams — moved questionnaires to Trust Centers, audits from manual to automated, or vendor reviews from one-off projects to continuous programs.
- You drive sustained operational change in functions you don't manage.
- You treat engineering velocity as a security input. Slow shipping creates security risk too.
- You can frame risk for a Board-level audience and for an engineering audience in the same week.
- First-principles thinker.
- Writes. NexHealth runs on documents; verbal-first operators struggle here.
- Comfortable being the ranking voice on policy and risk.

## Benefits
- Full Medical, Dental, and Vision (up to 100% covered)
- 401K and commuter benefits
- Flexible PTO
- High-impact work that directly improves the healthcare experience for millions

## Similar roles

- [Head of Technical Security](https://hotfix.jobs/jobs/9a93d642-e250-44a9-abd9-37663af395c9) - Greenboard - New York, NY - $185k – $300k/yr
- [Head of IT & Information Security](https://hotfix.jobs/jobs/f30c568f-e311-4782-97f6-8ec02f856c13) - Fable Security - Remote - $160k – $225k/yr
- [Head of Security & Compliance](https://hotfix.jobs/jobs/0c31140a-05ba-40ab-a5aa-12713d69cde4) - Casca - San Francisco, CA - $200k – $255k/yr
- [Head of Security](https://hotfix.jobs/jobs/f857e28d-567e-4a7a-8dfd-56496a7b4fa9) - Tatari - New York, NY - $200k – $250k/yr
- [Head of Security](https://hotfix.jobs/jobs/ef54689f-4d12-4bec-acb0-d64af7655e91) - Parallel - Palo Alto, CA - $150k – $300k/yr

**Apply:** https://hotfix.jobs/jobs/e24cae2a-302f-4ca1-a61b-ee0d6e6c56d6
**Canonical:** https://hotfix.jobs/jobs/e24cae2a-302f-4ca1-a61b-ee0d6e6c56d6