Head of Security

Verse Medical; New York (NY); Hybrid; USD 150,000 - 190,000; Full time

Job summary

Verse Medical in New York is seeking a Head of Security to own and execute a pragmatic security program across the company. This high-ownership, hands-on role will drive risk assessments, audits, incident response, and policy decisions in collaboration with our MSP and engineering teams.

You will build a security function from the ground up, guide leadership on risk tradeoffs, and support SOC 2 and HITRUST compliance as the company scales.

Qualifications

• 8+ years in security or information security, including direct ownership of a security program at a startup or growth-stage company.
• Experience running the operational mechanics of security: risk assessments, audits, access reviews, and incident response from detection through remediation
• Working knowledge of HIPAA, HITRUST, and/or SOC 2 control frameworks, enough to support and operate controls
• Experience with MSP relationships and cross-functional work with engineering to close security gaps
• Comfort operating without a team initially: hands-on-keyboard, building the function before hiring into it
• Strong communication skills, able to give clear, practical answers on what is and isn't permitted, and to represent our posture to auditors and enterprise customers, in addition to advising leadership on risk and strategy
• Competitive compensation.
• Opportunities for rapid career advancement in a growing company.
• 100% premium coverage for health insurance.
• 401(k) with no matching at this time.

Responsibilities

• Own our security program and serve as the senior-most security voice in the company, advising leadership on risk posture and tradeoffs
• Identify gaps against our target security posture and build a roadmap to close them; personally execute that roadmap rather than delegating it
• Run core security procedures: risk assessments, access and policy questions (is this allowed), audits, and incident response when issues arise
• Partner with our MSP and stakeholders across engineering and the business to improve our overall security posture
• Support and help run portions of our compliance program, including SOC 2 and HITRUST
• Build a small security team over time, starting hands-on and hiring as the workload requires it

Skills

Security leadership

Risk assessments

Incident response

HIPAA/HITRUST/SOC2

Security auditing

MSP management

Job description

Our Mission: Hospital-Quality Care, Everywhere.

The healthcare industry still relies on faxes and phone tags to coordinate critical care for patients at home. We think patients and the clinicians who serve them deserve better than a system stuck in 1995.

Verse Medical is building the modern software infrastructure to make it happen. We're a well-funded Series C company (backed by General Catalyst, SignalFire, and Sapphire Ventures) on a mission to heal a fragmented system. Our platform connects the dots between providers, payors, and patients, ensuring people get the high-quality care they need, reliably and right where they live. We’re growing fast and looking for people who are driven by this mission to join us!

Our Values: The Principles That Guide Us

Our values are the operating system for how we work together and with our partners. They aren't just words on a wall; they are the principles we bring to every decision, every day.

• We are transparent, upfront and direct. We operate with honesty and clarity. We share information openly, the good and the bad, and believe that direct, respectful feedback is the foundation of trust and progress.
• We value speed of iteration. We are building something new, which means we learn by doing. We prioritize rapid iteration and getting solutions into the hands of users, believing that progress is more valuable than perfection.
• We give 110% effort, 30% of the time. We are passionate about our mission, and there are moments that require us to go the extra mile. We believe in focused intensity when it counts, balanced by a sustainable pace that keeps our team energized for the long run.
• We empathize with customers to a fault. When our users face a problem, we own it. Instead of asking them to change, we ask ourselves, "How can we make this better?" We believe true innovation comes from deep empathy and a relentless focus on solving the real-world challenges of healthcare.

Job Title: Head of Security

We're hiring a Head of Security to own our security program. This is a high-ownership, hands-on role: you'll be responsible for identifying the highest leverage ways to improve the company’s security posture and then build and personally execute that roadmap. You'll run the operational core of security, including risk assessments, audits, incident response, and policy questions, while working both with our MSP and across the org to identify and execute. You'll also be responsible for supporting portions of our compliance efforts, including SOC 2 and HITRUST, as we continue building out compliance more broadly.

What You'll Achieve: A Glimpse into Your Contributions

• Own our security program and serve as the senior-most security voice in the company, advising leadership on risk posture and tradeoffs
• Identify gaps against our target security posture and build a roadmap to close them; personally execute that roadmap rather than delegating it
• Run core security procedures: risk assessments, access and policy questions ("is this allowed"), audits, and incident response when issues arise
• Partner with our MSP and stakeholders across engineering and the business to improve our overall security posture
• Support and help run portions of our compliance program, including SOC 2 and HITRUST
• Build a small security team over time, starting hands-on and hiring as the workload requires it

What You'll Bring: The Skills and Experience You'll Leverage

We believe that diverse experiences and backgrounds lead to better solutions. While we have an idea of what will help someone succeed in this role, we are open to being convinced by your unique story and skills. If you believe you can achieve the outcomes above, we encourage you to apply.

Core Skills & Experience:

• 8+ years in security or information security, including direct ownership of a security program at a startup or growth-stage company
• Experience running the operational mechanics of security: risk assessments, audits, access reviews, and incident response from detection through remediation
• Working knowledge of HIPAA, HITRUST, and/or SOC 2 control frameworks, enough to support and operate controls
• Experience with MSP relationships and cross-functional work with engineering to close security gaps
• Comfort operating without a team initially: hands-on-keyboard, building the function before hiring into it
• Strong communication skills, able to give clear, practical answers on what is and isn't permitted, and to represent our posture to auditors and enterprise customers, in addition to advising leadership on risk and strategy
• Competitive compensation.
• Opportunities for rapid career advancement in a growing company.
• 100% premium coverage for health insurance.
• 401(k) with no matching at this time.

This is a hybrid role based in our New York office and will require you to be in the office 4x in a week.

Our Pledge for an Equitable Future

At Verse Medical, our mission is to deliver equitable, hospital-quality care to everyone, regardless of their background or where they live. We can only achieve this if our own team reflects the diversity of the patients we serve. We are committed to building a workplace where everyone feels a sense of belonging, where their contributions are valued, and where they can do their best work. We embrace diversity of all kinds: race, gender, age, religion, identity, experience. We are actively working to build a more inclusive and equitable world, starting from within our own walls. We are an equal opportunity employer.

We are also committed to providing a positive and accessible interview experience. If you require any accommodations to participate in our process, please contact us at [e-mail].