Vice President of Information Security

Stellar Health is seeking a Vice President of Information Security to lead and evolve the company's security program. The VP will own the full scope of information security strategy, operations, governance, and budget, and will report to the Chief Compliance Officer. The role involves scaling the security function, redesigning its operating model, and navigating the security implications of Stellar's expanding AI capabilities. The VP will also serve as Stellar's executive security counterpart to customer CISOs and security leadership, and will be responsible for maintaining and growing the trust of health plan customers, provider networks, and patients.

• Lead and evolve the company’s security program, owning the full scope of information security strategy, operations, governance, and budget.
• Drive security governance in partnership with the Chief Compliance Officer, defining a multi-year security roadmap tied to the company's growth milestones.
• Serve as the senior security voice, providing regular reporting to the Chief Compliance Officer and executive leadership on risk postures, program maturity, investment priorities, and emerging threats.

• Demonstrated ability to personally adopt AI tools and lead AI adoption across a team, with measurable productivity gains and a mindset toward leveraging emerging technology to scale security operations
• Deep expertise in healthcare or health-tech security, with hands-on experience navigating HIPAA, HITRUST, and the regulatory dynamics unique to companies that handle PHI and payor data
• 13+ years of progressive experience in information security, with at least 5 years in a senior leadership role (Senior Director or above) owning security strategy and/or operations in a software product organization
• Proven people-management experience hiring, developing, and leading a small, high-performing security team in a high-growth software product environment, and scaling it in line with business needs
• Experience managing security in SaaS-first, cloud-native environments (AWS preferred)
• Experience owning a security budget and making resource allocation decisions that balance risk reduction with business investment
• Ability to lead through influence and manage key senior stakeholders across Engineering, Product, Finance, Legal, People, and Compliance
• Demonstrated ability to lead security due diligence for M&A, strategic partnerships, and new business line launches. Experience recommending remediation paths and explaining the business impact of risks discovered
• Demonstrated experience with threat-based or risk-based security frameworks, with a philosophy grounded in risk mitigation rather than risk elimination
• Strong problem-solving skills and the credibility to disagree with senior executives, hold the line on risk, and still reach alignment
• Strong executive presence with a track record of influencing peers, presenting to boards of directors, and speaking with existing and potential customers
• Depth in AI/ML security, including data governance, model security, and third-party AI risk assessment
• HITRUST Certified CSF Practitioner (CCSFP)
• HITRUST audit management experience
• Experience with CMS data handling requirements and government payor security expectations
• CISSP, CISM, or similar certifications