Security & Compliance Leader — Healthcare AI (San Francisco)

Knit; San Francisco (CA); On-site; USD 230,000 - 265,000; Full time

Benefits offered by this job

Full medical/dental/vision coverage

401(k) plan

PTO 24 days

Job summary

Knit Health seeks a hands‑on Security Leader to define and execute the security roadmap for a venture‑backed healthcare AI platform. You will partner with operations, engineering, and IT to build the program from the ground up, guiding audits, policy creation, and vendor risk reviews while communicating risk to executives and customers.

The role offers broad autonomy in a fast‑moving startup, with scope to build a team as the company grows, and a strong emphasis on protecting PHI and clinical

Qualifications

• Strong knowledge of cloud security (AWS/Azure/GCP).
• Experience owning HIPAA and SOC 2 Type II programs.
• Ability to translate risk into business terms for leadership.
• Proven track record driving security outcomes with cross‑functional teams.
• Direct involvement in audits and external security reviews.

Responsibilities

• Define security strategy and roadmap aligned with company goals.
• Represent Knit Health in audits, questionnaires, and customer conversations.
• Build a security‑aware engineering culture with training and guidance.
• Lead incident response planning and execution.
• Oversee compliance programs and certification activities (HIPAA, SOC 2).
• Manage security budget, tooling, and vendor relationships.
• Coordinate third‑party risk assessments and data protection controls.
• Communicate security risks clearly to non‑technical stakeholders.

Skills

Security strategy

Customer facing security

Security culture

Risk management

Incident response

Compliance governance

Education

Security certification

Tools

GRC platforms

Vulnerability scanning

Cloud security tooling

Job description

Knit Health seeks a hands‑on Security Leader to define and execute the security roadmap for a venture‑backed healthcare AI platform. You will partner with operations, engineering, and IT to build the program from the ground up, guiding audits, policy creation, and vendor risk reviews while communicating risk to executives and customers.

The role offers broad autonomy in a fast‑moving startup, with scope to build a team as the company grows, and a strong emphasis on protecting PHI and clinical