Head of Information Security & IT, Rad AI

• You have 8+ years of experience in information security, including leadership of security programs for a B2B SaaS organization
• You have owned external audits such as SOC 2 Type II and HIPAA (or similar healthcare/regulated frameworks) and have worked directly with auditors
• You have deep knowledge of HIPAA Privacy and Security Rules and operating in healthcare regulatory environments
• You have hands-on experience with modern cloud and application security (e.g., AWS/GCP/Azure, identity and access management, EDR, vulnerability management, SDLC security)
• You have led or been a key decision-maker in security conversations with enterprise customers, translating deep technical risk into clear business tradeoffs
• You have built or significantly matured a security program in a high-growth environment, balancing strong controls with speed and practicality
• You have partnered closely with Product and Engineering on product and application security for AI- or data-heavy products and experience managing security for AI/ML-enabled platforms
• Join our world-class team as we build and deploy AI solutions that empower physicians and transform patient care—making a meaningful impact on millions of lives

Desirable

• You are the person who turns security from a potential blocker into a durable competitive advantage
• Without you, SOC 2 and HIPAA audits become fire drills, customer questionnaires drag out our deals, and the risk of a serious incident grows as we move faster
• With you, we walk into any CIO, CISO, or compliance conversation with confidence
• You will design and lead the security strategy that lets us move quickly, pass the most demanding healthcare due diligence, and keep patient data safe—so our team can focus on building the future of radiology
• You will own Rad AI’s end-to-end security program—from governance and risk management to product, cloud, and enterprise security
• You’ll be the executive-level owner for SOC 2 Type II, HIPAA, and future frameworks like HITRUST, serving as the primary point of contact for auditors, external partners, and our largest customers
• You’ll set a clear security roadmap, align it with our product and go-to-market strategy, and lead a small, high-leverage team across cybersecurity, GRC, and security operations
• You’ll be a critical partner to Sales, Customer Success, Product, Engineering, Legal, and IT
• You’ll help close complex enterprise deals by navigating security assessments with confidence, coach our teams through incident response, and design pragmatic controls that actually work in a fast-moving startup
• You’ll also shape how we responsibly adopt evolving AI governance expectations in our products, ensuring we stay ahead of emerging risks while unlocking innovation
• Lead our information security, privacy, and compliance strategy across product, cloud infrastructure, and corporate IT
• Own SOC 2 Type II and HIPAA programs end to end—from control design and evidence collection to auditor relationships and report delivery
• Serve as a visible leader in customer security discussions and sales cycles, client security questionnaires, RFPs, and enterprise security reviews
• Own IT risk management program, and monitor ongoing vendor risk and compliance
• Design and oversee security operations and incident response, including on-call processes, playbooks, and executive communication
• Build, coach, and scale a high-performing security team across product/app security, GRC, and security operations over time