[Hiring] Vice President, Information Security @Stellar Health

Role Description

Stellar Health is seeking a Vice President, Information Security to lead and evolve the company’s security program. As VP, you will own the full scope of information security strategy, operations, governance, and budget. You will report to Stellar’s Chief Compliance Officer (CCO) and partner closely with Stellar’s Chief Technology Officer and cross-functional leaders across Engineering, Product, Operations, Legal, and People. You will lead and manage a small team, with the opportunity to grow in line with business needs.

Security sits within Stellar’s Compliance team, which is relatively mature, and a threat-based risk framework is already in place. Your mandate is to scale the security function and redesign its operating model where growth demands it. Specifically, you will:

• Take what exists and elevate it by driving security governance in partnership with the CCO.
• Define a multi-year security roadmap tied to Stellar’s growth milestones.
• Navigating the security implications of Stellar’s expanding AI capabilities.
• Maintain and grow the trust of our health plan customers, provider networks, and the patients they serve.

You will operate at the intersection of healthcare regulation, enterprise information security, and product innovation. Our customers range from mid-market health plans to large national enterprises and government payors, each with their own security requirements. You will serve as Stellar’s executive security counterpart to customer CISOs and security leadership, owning those relationships and building the trust that underpins Stellar’s commercial growth.

The right candidate will present a risk posture to a health plan’s board one day and work through a threat model with an engineering team the next.

Qualifications

• 13+ years of progressive experience in information security, with at least 5 years in a senior leadership role (Senior Director or above) owning security strategy and/or operations in a software product organization.
• Deep expertise in healthcare or health-tech security, with hands-on experience navigating HIPAA, HITRUST, and the regulatory dynamics unique to companies that handle PHI and payor data.
• Demonstrated experience with threat-based or risk-based security frameworks, with a philosophy grounded in risk mitigation rather than risk elimination.
• Proven people-management experience hiring, developing, and leading a small, high-performing security team in a high-growth software product environment, and scaling it in line with business needs.
• Strong executive presence with a track record of influencing peers, presenting to boards of directors, and speaking with existing and potential customers.
• Experience managing security in SaaS-first, cloud-native environments (AWS preferred).
• Demonstrated ability to personally adopt AI tools and lead AI adoption across a team, with measurable productivity gains and a mindset toward leveraging emerging technology to scale security operations.
• Depth in AI/ML security, including data governance, model security, and third-party AI risk assessment.
• Strong problem-solving skills and the credibility to disagree with senior executives, hold the line on risk, and still reach alignment.
• Ability to lead through influence and manage key senior stakeholders across Engineering, Product, Finance, Legal, People, and Compliance.
• Experience owning a security budget and making resource allocation decisions that balance risk reduction with business investment.
• Demonstrated ability to lead security due diligence for M&A, strategic partnerships, and new business line launches. Experience recommending remediation paths and explaining the business impact of risks discovered.

Requirements

• Lead the continued evolution of Stellar’s threat-based risk model.
• Own the security budget and resource allocation, ensuring investments are prioritized against Stellar’s threat landscape and aligned with the company’s multi-year growth plan.
• Set the security standards Stellar must meet across cloud security, application security, endpoint protection, and identity and access management.
• Own Stellar’s third-party and cyber risk management, including setting the security standard for vendors with access to PHI.
• Own Stellar’s incident response and business continuity readiness, including regular testing.
• Lead security due diligence for strategic partnerships, new payor relationships, and potential acquisitions.
• Ensure Stellar’s security program satisfies the requirements of federal and state security and privacy laws.
• Lead security-side preparation for HITRUST audits and manage remediation of findings.
• Stay ahead of evolving regulatory requirements, including AI governance frameworks and state-level health data privacy laws.
• Develop Stellar’s position on responsible AI security practices.
• Set and enforce the security standard for AI tools adopted across the organization.
• Design the security function’s operating model and organizational structure to support Stellar’s growth.
• Build a security-aware culture across the organization through training and embedded partnerships with Engineering and Product teams.
• Define what success looks like for the security function and report measurable progress against it.

Benefits

• Medical, Dental and Vision Benefits
• Flexible PTO
• Universal Paid Family and Caregiver Leave
• Wellhub+ Gym Memberships
• Pre-tax commuter benefits, HA, FSA plans
• Company sponsored One Medical memberships and Citibike memberships
• Medical Travel Benefits
• JOON, a flexible lifestyle spending account that gives our team a monthly stipend to spend on what matters most to them
• Stock Options & a 401k matching program
• A broad calendar of company sponsored social events that for our in-office and remote employees
• Company sponsored lunch for all NY HQ employees