Security & Compliance Chief — Healthcare AI

Knit Health; San Francisco (CA); On-site; USD 230,000 - 265,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

401(k) plan

PTO 24 days

Job summary

Knit Health is seeking a hands-on Security Leader to set the vision and roadmap for security across a fast-moving healthcare AI company. You will own HIPAA and SOC 2 Type II readiness, drive audits, and lead cross-functional teams including operations, engineering, and IT to build a robust security program.

You will shape policy, tooling, and incident response while partnering with executives to communicate risk in business terms.

Qualifications

• Minimum experience leading security in healthcare tech with external audits.
• Experience owning HIPAA programs and SOC 2 Type II audit work end-to-end.
• Strong cloud security knowledge across AWS/Azure/GCP and IAM.

Responsibilities

• Own the security strategy and roadmap aligned with growth and regulatory risk.
• Represent Knit to customers, auditors, and partners in security diligence and reviews.
• Design and implement practical security controls: access management, incident response, and cloud security.
• Own compliance programs (SOC 2 II, HIPAA) and drive audit readiness and evidence collection.
• Lead budget and vendor decisions for security tooling and training.
• Maintain incident response plan and lead coordinated response across teams.

Skills

Security leadership

HIPAA compliance

SOC 2 Type II

Regulatory audits

Executive communication

Autonomy in startup

Team cross-collaboration

Python/DevOps concepts

Cloud risk management

Tools

Terraform

Job description

Knit Health is seeking a hands-on Security Leader to set the vision and roadmap for security across a fast-moving healthcare AI company. You will own HIPAA and SOC 2 Type II readiness, drive audits, and lead cross-functional teams including operations, engineering, and IT to build a robust security program.

You will shape policy, tooling, and incident response while partnering with executives to communicate risk in business terms.