Head of Security, Privacy & Compliance

Layer Health; Boston; Remote; PHP 11,307,000 - 14,447,000; Full time

Job summary

Layer Health is seeking a Head of Corporate and Information Security to own and scale our security program as we handle PHI and sensitive data for health systems and enterprise partners. You will define the security strategy, strengthen cloud and product security, and lead incident response while partnering with executives to balance risk and growth.

The role requires deep cloud security expertise, healthcare security experience, and a hands-on approach to building a small, effective security

Qualifications

• 7+ years in information security or related roles with cross-area ownership.
• Experience building security programs in startups or growth tech environments.
• Hands-on GCP experience; AWS/Azure acceptable.
• Healthcare security experience and HIPAA/PHI handling preferred.
• Experience with SOC 2 and ISO 27001.

Responsibilities

• Own Layer's security strategy and risk program.
• Improve security posture across GCP and SDLC; identify and address gaps.
• Protect PHI and customer data with access controls and data protection.
• Lead detection, incident response, and SIEM capabilities.
• Own corporate security including IAM, endpoints, and device management.
• Drive security awareness and training programs.
• Collaborate with Chief Privacy Officer on risk planning.

Skills

Security leadership

Cloud security

GCP experience

Security operations

HIPAA/PHI handling

ISO 27001 SOC 2

Risk management

Tools

SIEM

Job description

Layer Health is seeking a Head of Corporate and Information Security to own and scale our security program as we handle PHI and sensitive data for health systems and enterprise partners. You will define the security strategy, strengthen cloud and product security, and lead incident response while partnering with executives to balance risk and growth.

The role requires deep cloud security expertise, healthcare security experience, and a hands-on approach to building a small, effective security