Security Leader & Risk Architect (HIPAA/SOC 2)

versemedical; New York (NY); Hybrid; USD 180,000 - 260,000; Full time

Benefits offered by this job

Competitive compensation

Career advancement

Health insurance coverage

401(k) with no matching

Job summary

Verse Medical in New York (hybrid) is hiring a Head of Security to own our security program. This high‑ownership, hands‑on role will identify high‑leverage improvements, build and execute a security roadmap, run risk assessments, audits, and incident response, and collaborate with our MSP and engineering teams to raise our security posture.

You’ll progressively lead a small security team and partner with leadership on risk and compliance for SOC 2 and HITRUST.

Qualifications

• 8+ years leading security programs at startups or growth companies
• Experience running risk assessments, audits, access reviews, and incident response
• Working knowledge of HIPAA, HITRUST, and SOC 2 controls
• Experience with MSP relationships and cross-functional work with engineering
• Ability operate hands-on initially and build the function before hiring
• Strong communication skills, able to explain risk posture and posture to auditors

Responsibilities

• Own our security program and serve as the senior‑most security voice in the company
• Identify gaps against the target security posture and execute a roadmap
• Run core security procedures: risk assessments, audits, access reviews, and incident response
• Partner with MSP and engineering/business stakeholders to improve security posture
• Support compliance efforts including SOC 2 and HITRUST
• Build a small security team over time, starting hands‑on and hiring as workload grows

Skills

Security leadership

Security operations

HIPAA/HITRUST/SOC 2

MSP relationships

Hands-on startup security

Strong communication

Job description

Verse Medical in New York (hybrid) is hiring a Head of Security to own our security program. This high‑ownership, hands‑on role will identify high‑leverage improvements, build and execute a security roadmap, run risk assessments, audits, and incident response, and collaborate with our MSP and engineering teams to raise our security posture.

You’ll progressively lead a small security team and partner with leadership on risk and compliance for SOC 2 and HITRUST.