Head of Security

Pivotal Health•Los Angeles, CA

5d•$180,000 - $250,000•Hybrid

About The Position

Pivotal Health is seeking a Head of Security, a senior leadership role responsible for establishing and owning the company's comprehensive security program from its inception. This position is crucial for a rapidly growing, AI-native healthcare technology company that handles sensitive provider data and complex financial transactions. The role operates at the nexus of strategy, engineering, compliance, and customer trust, requiring close collaboration with stakeholders across the organization to integrate security as a fundamental aspect of Pivotal's operations, development, and customer relationships. The ideal candidate will possess both the technical depth to engage effectively with engineering teams and the strategic breadth to define organizational security strategy, manage regulatory compliance, and represent the company's security posture to external parties. This is an opportunity for an individual motivated by building a significant security program from the ground up.

Requirements

8+ years of experience in security, with significant experience in both technical implementation and program-level strategy.
Strong working knowledge of cloud security, infrastructure security, and application security fundamentals.
Experience building or significantly maturing a security program, preferably at an early-stage or high-growth company.
Hands-on experience with compliance frameworks (SOC 2, HIPAA, or similar), including control design, audit preparation, and ongoing management.
Excellent communication skills to represent security externally and make complex topics accessible.
Proven ability to collaborate and influence stakeholders across different functions.
Comfort operating in ambiguous environments and building programs from scratch.
Up-to-date knowledge of the current threat landscape, security tooling, and best practices.

Nice To Haves

Experience in HealthTech, FinTech, or other regulated industries handling sensitive data.
Background working with financial systems, payments infrastructure, or data-intensive platforms.
Familiarity with AI/LLM security considerations and responsible AI deployment practices.
Experience managing or growing a security team.

Responsibilities

Build and own Pivotal's security program, including strategy, policies, processes, and roadmap.
Identify critical assets, prioritize risks, and develop a scalable security program.
Partner with engineering and infrastructure teams to embed security into platform design, development, and deployment.
Advocate for secure-by-design practices without hindering development velocity.
Lead compliance and regulatory readiness for frameworks such as SOC 2 and HIPAA.
Translate regulatory requirements into actionable controls and manage audit preparations.
Monitor the evolving security landscape, including threats, attack vectors, and regulatory changes.
Represent Pivotal's security program to customers, partners, and prospects, including responding to security questionnaires and leading trust reviews.
Drive security awareness and a security-conscious culture across all organizational functions.
Develop guidelines for the secure and responsible use of emerging technologies, including AI and LLMs.