Security & Compliance Leader for Healthcare AI

Define Ventures; New York (NY); On-site; USD 180,000 - 230,000; Full time

Job summary

Layer Health is seeking its first Head of Corporate and Information Security to own the security program as we scale with health systems and enterprise partners. You will lead strategies for PHI protection, risk management, and security operations across cloud, endpoints, and corporate systems, partnering with engineering and product teams to raise the bar while preserving speed.

You will drive a comprehensive security program focused on SOC2/ISO 27001 readiness, build strong telemetry, and

Qualifications

• 7+ years in information security with multi-area ownership.
• Experience building security programs in startups or fast-moving tech companies.
• Strong technical depth in cloud environments, with hands-on GCP preferred.
• Experience with security operations, telemetry, detection, and incident response.
• Background protecting PHI and HIPAA-regulated data.
• Familiarity with SOC 2 and ISO 27001 frameworks and certification processes.
• Strong risk judgment and ability to translate framework requirements into controls.

Responsibilities

• Own security strategy, risk program, and roadmap toward ISO 27001.
• Improve technical security posture across GCP, CI/CD, and software development.
• Protect PHI and customer data through data controls and access management.
• Build detection, incident response, and security operations capabilities.
• Oversee corporate security including identity, endpoints, and device management.
• Lead security awareness and phishing simulations.
• Collaborate with Chief Privacy Officer on risk strategy.

Skills

Security leadership

Cloud security

GCP

Security operations

HIPAA/PHI experience

Risk management

Communication to executives

Tools

SIEM

GCP

IAM

Secrets management

Job description

Layer Health is seeking its first Head of Corporate and Information Security to own the security program as we scale with health systems and enterprise partners. You will lead strategies for PHI protection, risk management, and security operations across cloud, endpoints, and corporate systems, partnering with engineering and product teams to raise the bar while preserving speed.

You will drive a comprehensive security program focused on SOC2/ISO 27001 readiness, build strong telemetry, and