Head of IT & Security
Not Disclosed•Full-TimeOn-site
location_on301, Union Street, Central Business District, Belltown, Seattle, King County, Washington, 98101, United States
About NexHealth
Our healthcare system remains frustratingly analog. When you live in a world of one-tap car rides, instant meal delivery, and unlimited streaming, why do you still have to call to schedule a doctor's appointment and fill out a clipboard in the waiting room?
NexHealth's mission is to accelerate innovation in healthcare by connecting patients, providers, and developers. We're building the infrastructure layer for modern healthcare, connecting thousands of fragmented, on-premise, and closed EHR systems into a single, modern platform that powers software, APIs, payments, and patient experiences across the ecosystem.
Founded in 2017 and headquartered in San Francisco, we are a Series C company with over 200 employees. We are trusted by tens of thousands of providers and hundreds of health-tech developers, forging the infrastructure layer that modern healthcare needs.
About the Role
NexHealth is a technology company building infrastructure that's reshaping how patient data moves and how the HealthTech ecosystem connects. We're looking for a Security Lead to own our security governance, compliance, IT operations, vendor security, and incident response. Your goal is to establish the function, embed strong practices, and partner closely with engineering, legal, and leadership.
This is a player-coach role with real hands-on expectation in year one. You'll drive the next phase of our security and compliance program and build your team. You will serve as the named Information Security Officer and Privacy Officer for SOC 2 and HIPAA, owning the policy manual, audit liaison relationships, and control mapping across overlapping regimes.
You will set security standards across application security, vulnerability management, cloud security, audit logging, and access controls, driving the technical program through Engineering via influence, not direct authority. Additionally, you will build and develop the IT and workforce security program, own vendor security processes, lead incident response, and manage the risk register and cyber insurance relationship.
Our Values
We are a team of founders at heart, driven by a specific set of principles:
- Solve the customer's problems, not yours: When making decisions, think from the perspective of the customer. It's easy to make decisions that make our lives simpler, but not the customers.
- Do the things others are not willing to do: As a Nexer, always go after the hardest problems. Pursue things at the highest quality and move at the fastest pace.
- Take ownership: Act like a founder. Own your roles, destinies, mistakes, behavior, and our mission. The buck stops with each of us - no blaming or excuses.
- Say what's on your mind, with positive intent: Be direct, proactive, transparent, and frequent in your communication.
- Default trust: As a Nexer, you do not have to earn trust; trust is given to you by default. If we by default trust each other, our speed of communication, feedback, information sharing, and overall improvements will be a lot faster.
- Think in first principles: We first identify the problem and then break it down to its fundamentals before diving into solutions. We constantly ask "why" to validate our assumptions.
Equal Opportunity
We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We provide reasonable accommodation for individuals with disabilities to participate in the application or interview process. Contact talent@nexhealth.com to request assistance.
Work location
Work model: On-site
301, Union Street, Central Business District, Belltown, Seattle, King County, Washington, 98101, United States
Seattle, Washington
Key Responsibilities
- check_circleOwn security governance, compliance, and IT programs end-to-end
- check_circleServe as Information Security Officer and Privacy Officer for SOC 2 and HIPAA audits
- check_circleSet security standards for application security, vulnerability management, and cloud security
- check_circleBuild and develop the IT and workforce security program including identity and training
- check_circleManage vendor security intake, assessment, BAA execution, and ongoing oversight
- check_circleLead incident response activities and run annual tabletop exercises
- check_circleMaintain the risk register, privacy operations, and business continuity plans
Requirements
- verified8+ years of relevant security experience
- verified3+ years in a security leadership role
- verifiedSoftware engineering background
- verifiedHands-on experience with SIEM, MDR, IDS/IPS, WAF, DLP, and vulnerability scanners
Benefits & Perks
check_circleFull Medical, Dental, and Vision insurance with up to 100% coveragecheck_circle401K retirement plancheck_circleCommuter benefitscheck_circleFlexible paid time off policyStock options
Similar Job Opportunities
Frequently asked questions about Head of IT & Security at NexHealth
What does a Head of IT & Security at NexHealth do?expand_more
A Head of IT & Security at NexHealth is responsible for the following: Own security governance, compliance, and IT programs end-to-end; Serve as Information Security Officer and Privacy Officer for SOC 2 and HIPAA audits; Set security standards for application security, vulnerability management, and cloud security; and Build and develop the IT and workforce security program including identity and training.
What are the requirements for this Head of IT & Security role?expand_more
NexHealth is looking for candidates who meet the following requirements: 8+ years of relevant security experience; 3+ years in a security leadership role; Software engineering background; and Hands-on experience with SIEM, MDR, IDS/IPS, WAF, DLP, and vulnerability scanners.
Where is the Head of IT & Security role at NexHealth located?expand_more
Head of IT & Security at NexHealth is based in 301, Union Street, Central Business District, Belltown, Seattle, King County, Washington, 98101, United States. This is a on-site role.
Is this Head of IT & Security job remote, hybrid, or on-site?expand_more
NexHealth has listed this Head of IT & Security role as on-site.
How much experience is required for this Head of IT & Security role?expand_more
Head of IT & Security at NexHealth typically requires 8+ years of relevant experience at the lead level.
What skills do you need for the Head of IT & Security role at NexHealth?expand_more
Key skills for Head of IT & Security at NexHealth include Soc 2; Hipaa; Aws; Siem; MDR; Ids/ips; Waf; and DLP.
What category does the Head of IT & Security role belong to?expand_more
Head of IT & Security at NexHealth is part of the it job category on Recrutus.
About NexHealth
NexHealth operates within the software development industry, headquartered in San Francisco, California. The company specializes in building technology solutions that streamline healthcare practice operations. Its platform integrates critical workflow components, linking every stage of the patient journey directly with existing health record systems. This connectivity spans from initial appointment scheduling through to final payment processing, ensuring data consistency across the entire care continuum.
The organization serves medical practices and healthcare providers seeking to optimize their administrative efficiency. By unifying disparate operational steps, NexHealth helps organizations reduce manual errors and improve patient engagement. The platform functions as a central hub that connects front-office activities with clinical data infrastructure. This approach allows healthcare teams to focus more on patient care while maintaining accurate and accessible records. The company's technology is designed to support practices of various sizes looking to modernize their operational workflows without disrupting existing electronic health record environments.
Browse more roles: All NexHealth jobs, it jobs on Recrutus.