Head of InfoSec and IT Operations

Head Of Infosec And It Operations

Autonomize AI is revolutionizing healthcare by combining data and context to streamline knowledge workflows, reduce administrative burdens, and improve patient outcomes. We're a high-velocity, mission-driven startup that values full-stack ownership, clear alignment, and customer obsession.

Autonomize AI is hiring a Head of InfoSec and IT Operations, responsible for establishing, operating, and continuously strengthening the company's information security, cybersecurity, privacy, and AI governance programs. This role ensures that security and compliance are embedded into the company's product architecture, cloud infrastructure, software development lifecycle, and client operations.

The Head of InfoSec and IT Operations will lead the development of a scalable, audit-ready security framework aligned with HIPAA, SOC 2 Type II, HITRUST CSF, ISO 27001 (as applicable), and evolving AI governance expectations. This role partners closely with Engineering, Product, Customer Success, and external stakeholders to protect sensitive healthcare data while enabling innovation and growth. This is a strategic and operational leadership role requiring expertise in regulated healthcare environments and modern AI-enabled platforms.

Key responsibilities include:

• Develop and execute a comprehensive enterprise information security strategy aligned with business growth and regulatory obligations.
• Ensure compliance with HIPAA Privacy and Security Rule, HITECH, and applicable state privacy and security laws.
• Oversee cloud security architecture including encryption, key management, data segmentation, and secure configuration.
• Embed security into the Secure Software Development Lifecycle (Secure SDLC).
• Oversee data classification, retention, minimization, and secure disposal policies.
• Establish and oversee vendor security due diligence processes.
• Build a culture of privacy and security awareness across the company.

Qualifications include:

• 12+ years of progressive information security leadership experience.
• Demonstrated experience as a security leader within a healthcare technology company, health plan, provider organization, or regulated SaaS environment.
• Deep knowledge of HIPAA Privacy and Security Rules and healthcare regulatory environments.
• Experience leading SOC 2 Type II and/or HITRUST certification processes.
• Expertise in cloud security architecture and modern DevSecOps practices.
• Strong executive presence and ability to communicate complex security risks to non-technical stakeholders.

Preferred certifications include:

• CISSP (Certified Information Systems Security Professional)
• CISM (Certified Information Security Manager)
• CISA (Certified Information Systems Auditor)
• CCSP (Certified Cloud Security Professional)
• HITRUST CCSFP

What we offer:

• High-impact opportunity to shape the future of healthcare AI.
• Autonomy, ownership, and the ability to chart your own growth path.
• Competitive base salary + commission + accelerators.
• 100% employer-paid health, dental, and vision insurance.
• Retirement plans (401k), disability insurance, and employee assistance programs.
• Work with a bold, fast-moving team solving meaningful problems.

How to apply:

Send your resume and a brief note to View email address on click.appcast.io explaining why you're the right partner to expand our most strategic national accounts.