CISO: Enterprise Security, Risk & Compliance Leader

Jobtailor; California (MO); On-site; USD 320,000 - 420,000; Full time

Job summary

Spring Health seeks an experienced Chief Information Security Officer to define and lead enterprise-wide information security, privacy, and IT risk management. You will oversee Security Operations, Application/Product Security, cloud/infrastructure security, IAM, third-party risk, and incident response, partnering with Legal, Privacy, Compliance, Product, and Engineering.

The role requires deep HIPAA/HITRUST expertise, a track record of building high‑performing security teams, and strong

Qualifications

• 15+ years of progressive experience across information security, cybersecurity, IT, or technology risk with significant executive leadership background.
• Deep knowledge of HIPAA and relevant healthcare security/compliance requirements.
• Experience leading HITRUST, SOC 2, ISO 27001, PCI DSS, GDPR, CCPA programs and related governance.

Responsibilities

• Define, lead, and advance enterprise-wide information security and IT strategy.
• Lead Information Security, Compliance/GRC, and IT functions including Security Operations, Application/Product Security, cloud and infrastructure security, IAM, third-party risk, incident response, and enterprise compliance.
• Advise executive leadership and the Board on cybersecurity risk and security investments.
• Oversee threat detection, vulnerability management, incident response, security monitoring, and resilience exercises.
• Embed security and cloud security in the software development lifecycle and govern AI security strategy.

Skills

Information Security Leadership

Compliance/GRC Management

Cloud Security Strategy

Incident Response Management

Healthcare Technology Compliance

Executive Communication

Team Building

Tools

SIEM

Security Monitoring Tools

Endpoint Management

Job description

Spring Health seeks an experienced Chief Information Security Officer to define and lead enterprise-wide information security, privacy, and IT risk management. You will oversee Security Operations, Application/Product Security, cloud/infrastructure security, IAM, third-party risk, and incident response, partnering with Legal, Privacy, Compliance, Product, and Engineering.

The role requires deep HIPAA/HITRUST expertise, a track record of building high‑performing security teams, and strong