Chief Information Security Officer

The Security Executive Council; Boston (MA); On-site; USD 243,000 - 365,000; Full time

Job summary

Verily Health seeks a passionate Security leader to helm its centralized Security organization. You will build and mentor a 20-person team, set strategy, and drive governance, risk, and compliance across products and corporate systems.

You will collaborate with Engineering, Product, Regulatory, IT, Legal, and Finance, while engaging with customers and security partners to advance scalable, AI-driven security solutions in healthcare.

Qualifications

• 8 years of progressive management experience in security engineering and/or information security.
• 10 years of technical experience in software, security, and relevant tools.
• 5 years of experience working with cloud and enterprise security systems, including pre- and post-sales engagements with customers.
• Proven track record of strong innovation and integration between security teams and software engineering groups.
• Principled and grounded approach to establishing a Company security strategy spanning products, corporate systems, employees, and customers.
• Direct experience with governance, risk, and compliance frameworks, including ISO 27001 and SOC 2.
• Direct experience with Okta, CrowdStrike, Wiz, Synk, or equivalent tools, and hands-on experience with hyperscaler platforms (GCP/AWS/Azure).
• Bachelor’s degree in Computer Science, Computer Security, or equivalent experience.

Responsibilities

• Set Verily’s security strategy and roadmap, supporting external products and internal corporate systems.
• Recruit top talent and build and lead a team of security professionals.
• Drive scaling and adoption of AI-driven security tools and automation with engineering.
• Collaborate with Leadership across Engineering, Product, Clinical, Regulatory, IT, Legal, Finance, and Commercial teams.
• Take on an external-facing role with key customers and security partners.

Skills

Security leadership

Security strategy

Team building

Cloud security

GRC frameworks

Cross-functional collaboration

External-facing engagements

Education

Bachelor’s degree in Computer Science or related field

Tools

Okta

CrowdStrike

Wiz

Snyk

GCP

AWS

Azure

Job description

About the job

Who We Are

Verily Health is a data platform and technology company purpose-built to power AI-enabled precision health solutions that accelerate research and improve care for individuals and communities. Uniquely positioned at the intersection of technology, data science, and healthcare, Verily transforms multimodal health data into insights, models, and actions that make healthcare more personalized, predictive, and precise.

Description

Verily is seeking a passionate and experienced leader for the company’s centralized Security organization. The scope of Security encompasses security and privacy engineering, information security, and governance, risk, and compliance, in support of a wide range of innovative, AI-enabled, and regulated healthcare software products and platforms. Verily thrives in healthcare, one of the most complex and sensitive domains for security professionals. We are seeking an outstanding Security leader to build, mentor, and lead a 20-person team responsible for ensuring our products and customers are safe, can trust our handling of sensitive data, and that all information is secure. If you’re looking for a role where your work will impact the lives of people, come explore Verily!

Responsibilities

• Set Verily’s security strategy and roadmap, supporting external products and internal corporate systems.
• Recruit top talent and build and lead an excellent team of highly technical security professionals.
• Drive scaling and adoption of AI-driven security tools and automation patterns with engineering to enhance operational security, product security and data privacy.
• Collaborate with Verily Leadership, building strong and trusting relationships with Engineering, Product, Clinical, Regulatory and Quality, IT, Legal, Finance, and Commercial teams.
• Take on an external-facing role with key customers, security organizations, and colleagues across the industry.

Qualifications

Minimum Qualifications

• 8 years of progressive management experience in security engineering and/or information security organizations.
• 10 years of technical experience in software, security, and relevant tools.
• 5 years of experience working with cloud and enterprise security systems, including pre- and post-sales engagements with customers
• Proven track record of strong innovation and integration between security teams and software engineering groups.
• Principled and grounded approach to establishing a Company security strategy spanning products, corporate systems, employees, and customers.
• Direct experience working with governance, risk, and compliance frameworks, including ISO 27001 and SOC 2.
• Direct experience with Okta, Crowdstrike, Wiz, Synk, or equivalent tools, and hands-on experience with hyperscaler platforms, Google Cloud Platform, Amazon Web Services, and/or Azure.
• Bachelor’s degree in Computer Science, Computer Security, or equivalent experience.

Preferred Qualifications

• 5+ years of working experience in the healthcare field, including familiarity with HIPAA and state laws regarding consumer health privacy.
• Board-level exposure and leadership confidence.
• Direct experience with FedRAMP and GDPR.
• Have held leadership responsibility for governance, risk, and compliance function.

Compensation

Compensation Information

The US base salary range for this full-time position is $243,000-$365,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. The range displayed on each job posting reflects the minimum and maximum target for new hire salaries for the position across all US locations. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.

Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits.

We know how to fine-tune corporate security because we've led effective and efficient Fortune 500-level security programs. The SEC helps businesses find the best balance of risk mitigation, cost and innovation.