SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Stellar Health is a venture-backed healthtech company (backed by General Atlantic, Point72, Primary Venture Partners) that helps primary care providers transition from fee-for-service to value-based care. The company's platform delivers real-time patient information, activates practice staff, and provides financial incentives tied to quality outcomes rather than visit volume.
As Vice President of Information Security, you will lead the full scope of Stellar's information security strategy, operations, governance, and budget, reporting to the Chief Compliance Officer. You will own enterprise security strategy aligned with business objectives and regulatory obligations, serve as the senior security voice to executive leadership and the Board, and lead the continued evolution of Stellar's threat-based risk model.
Key responsibilities include: owning the security budget and resource allocation tied to Stellar's growth plan; setting security standards across cloud, application, endpoint, and identity/access management; managing third-party and cyber risk, including vendor approval authority for PHI access; owning incident response and business continuity readiness; leading security due diligence for M&A and strategic partnerships; serving as security counterpart to customer CISOs and health plan procurement teams; ensuring compliance with HIPAA, HITRUST, and evolving state privacy laws; managing HITRUST audit preparation and remediation; developing Stellar's position on responsible AI security practices with authority to approve or restrict AI tools; designing the security function's operating model and hiring/developing a team; and building a security-aware culture across the organization.
You will operate at the intersection of healthcare regulation, enterprise security, and product innovation, serving as Stellar's executive security counterpart to customers ranging from mid-market health plans to large national enterprises and government payors. The role requires balancing hands-on security work (architecture reviews, risk assessments, incident response) with strategic leadership and stakeholder management across Engineering, Product, Finance, Legal, People, and Compliance.
REQUIREMENTS:
- 13+ years progressive information security experience, with at least 5 years in senior leadership role (Senior Director or above) owning security strategy/operations in software product organization
- Deep expertise in healthcare/health-tech security with hands-on experience navigating HIPAA, HITRUST, and regulatory dynamics of PHI and payor data handling
- Demonstrated experience with threat-based or risk-based security frameworks, grounded in risk mitigation philosophy
- Proven people-management experience hiring, developing, and leading small high-performing security teams in high-growth software environments, with ability to scale
- Strong executive presence with track record of influencing peers, presenting to boards, and engaging with customers
- Experience managing security in SaaS-first, cloud-native environments (AWS preferred)
- Demonstrated ability to adopt and lead AI tool adoption across teams with measurable productivity gains
- Depth in AI/ML security including data governance, model security, and third-party AI risk assessment
- Strong problem-solving skills and credibility to disagree with senior executives while reaching alignment
- Ability to lead through influence and manage key stakeholders
- Experience owning security budget and making resource allocation decisions
- Demonstrated ability to lead security due diligence for M&A, partnerships, and business launches
BONUS: CISSP, CISM, or similar certifications; HITRUST Certified CSF Practitioner (CCSFP); HITRUST audit management experience; CMS data handling and government payor security experience.
