Head of Information Security

Remotedxb; Dubai; On-site; AED 350,000 - 650,000; Full time

Job summary

AIOS is building the world's first full-stack AI doctor. We are a fast-growing, founder-led company with a growing cybersecurity program across multiple geographies. We are seeking a security leader to own strategy and operations.

You will establish security operations, manage IAM, protect cloud infrastructure, and drive risk assessments to meet HIPAA, GDPR, SOC 2, and ISO 27001. This role requires autonomy in a high-growth environment.

Qualifications

• 5+ years leading cybersecurity in a complex, fast-growing organization.
• Deep technical expertise in IAM, endpoint security, cloud infrastructure, and application security.
• Proven track record of building or significantly improving a security program from the ground up.
• Experience handling highly sensitive patient, financial, or regulated data.
• Ability to work autonomously in an evolving, high-growth environment.

Responsibilities

• Own cybersecurity strategy, roadmap, and operating model across all AIOS entities and geographies.
• Establish security operations, incident response, and disaster recovery systems.
• Manage IAM, endpoint security, and secure employee lifecycles.
• Partner with engineering to secure apps, APIs, cloud infrastructure, and data.
• Lead risk assessments and ensure HIPAA, GDPR, SOC 2, and ISO 27001 compliance.
• Manage third-party security risks and foster security awareness across the organization.

Skills

Cybersecurity leadership

IAM

Endpoint security

Cloud security

Application security

Regulatory compliance

Tools

IAM platforms

SIEM

Incident response

Cloud security tools

Job description

About the Company

AIOS is building the world's first full-stack AI doctor. We are a fast-growing, founder-led company currently serving over 150k patients monthly via our UK brand, Bolt Pharmacy. Our mission is to scale globally to become the dominant AI healthcare provider through autonomous prescribing systems.

Responsibilities

• Own the cybersecurity strategy, roadmap, and operating model across all AIOS entities and geographies.
• Establish systems for security operations, incident response, and disaster recovery.
• Manage identity, access, and endpoint security to ensure scalable and secure employee lifecycles.
• Partner with engineering to secure applications, APIs, cloud infrastructure, and sensitive data.
• Lead risk assessments and ensure compliance with frameworks like HIPAA, GDPR, SOC 2, and ISO 27001.
• Manage third-party security risks and build a culture of security awareness across the organization.

Requirements

• 5+ years of experience leading cybersecurity or information security in a complex, fast-growing organization.
• Deep technical expertise in IAM, endpoint security, cloud infrastructure, and application security.
• Proven track record of building or significantly improving a security program from the ground up.
• Experience handling highly sensitive patient, financial, or regulated data.
• Ability to work autonomously in an evolving, high-growth environment.

Preferred Qualifications

• Experience in digital health, telemedicine, or pharmacy environments.
• Experience managing security across multiple international legal entities (US, UK, Europe).
• Direct experience leading compliance programs for HIPAA, GDPR, or SOC 2.