Join the frontlines of today's healthcare transformation 

We're seeking a Chief Information Security Officer to help us transform the way primary care is delivered and how patients are served. 

Why VillageMD? 

VillageMD is changing the trajectory of healthcare. We’re empowering primary care physicians to make informed decisions, and engaging patients in meaningful ways. We work with thousands of clinicians and healthcare disruptors across the country, improving patient health while driving down the cost to deliver it. 

We are a mission-oriented organization, and we are thrilled about the work that we accomplish every day. We’re transparent. Collaborative. Relentless in pursuit of our mission. With a confidence to lead but the humility to never stop learning. We believe that diverse backgrounds and experiences create the best opportunity for innovation. And we know that the community we are growing is greater than any one individual. 

We’ve built our technology using the best of cloud and open-source technologies to create an open, data-first platform that is enriched with analytical models and connected to the most modern internal and external apps.

We’re creating an entirely new patient experience in which we’ve embedded our clinical model that is facilitated by connected medical devices, symptom checking, telehealth, messaging, and other features that allow patients to simply and easily connect with care teams, 24/7.

Could VillageMD’s next CISO be you? 

As the Chief Information Security Officer, you will be the executive security leader at VillageMD.  You will be accountable for the security strategy, program development, and execution of security capability value creation and risk mitigation at the fastest growing leader in primary care in the US. 

You will be stepping into an established security environment and embody the duality of both our security-first culture and pragmatic yet rapid development of capability as we embark to change healthcare for the better, every day.

As a hands-on practitioner, you will guide a strong team of security architects, operations, and risk managers across both our proprietary platform and apps and our corporate technology assets.  You’ll regularly interface with senior leaders across the company as well as those in product, analytics, and engineering to ensure our security-first approach is seen, felt and proven in all that we do, all while accelerating value creation. 

How you can make a difference

During your first year, you can expect the following professional challenges: 

Security Strategy and Culture

• As the security leader, interface regularly with executives and VillageMD leaders around the country to listen, educate, and collaborate on solution strategy that drives business growth while reducing risk
• Continue to enable the organization’s greatest asset, our employees, to be the fabric that helps protect our organization and mitigate risk
• Design and implement our next-level security program that will facilitate unprecedented levels of scale from our current nine major national markets to thirty more in the next five years
• Build upon a data-driven risk management measurement framework to drive remediation
• Use OKR’s annually and quarterly to collaborate with colleagues, including our Chief Privacy Officer, in order to plan and execute a next-level, integrated security agenda
• Build relationships and maintain trust through industry partnerships with professional contacts, organizations, and trusted advisors to build thought leadership within the program
• Architect a series of assessments and policies and procedures that engage users around the company and are leveraged in daily work versus being viewed as “shelf-ware” 

Platform Architecture

• Partner with Product, Engineering and Data Architects to enhance the framework, architecture, and operational strategy to underpin a patient-first digital experience for millions for users.

Risk Management

• Our proprietary platform is HITRUST certified and maintaining this certification is paramount as a business currency with physicians, patients, and other stakeholders.
• Build upon a data driven risk management measurement framework to drive remediation and investment across technology solutions
• Partner with legal and compliance teams to align changing regulation with technology capability
• Partner with technology and business process owners to assess risks and provide mitigation guidance
• Oversee the vendor risk management and monitoring program in partnership with technology and business leaders

Cybersecurity Capability

• Oversee the design, planning, and scale of security operations activities to provide continuous monitoring and response across technology solutions and business locations
• Lead the vision for security in product delivery including the specification of analysis tools, threat modeling, execution of penetration tests and risk assessments
• Manage resolution and reporting of security bugs and vulnerabilities across all technology products.

Acquisition and Integration

• Lead the implementation of the security program across acquired entities
• Assess risk during the due diligence plan and own mitigation planning

Incident Response and Continuity

• Lead incident response planning and exercises across the business and provide readiness
• Develop relationships and leverage strategic partnerships with outside trusted advisors for incident response planning and engagement when necessary

Skills for success 

As a successful VillageMD Chief Information Security Officer, you will bring:

• Advanced knowledge of applicable US laws and regulations as they relate to Information Security and the effective management of Information Security Risks 
• A university degree in Information or Technology Management or Risk Management or equivalent work experience. 
• Advanced understanding and experience in managing business processes and budgeting 
• Advanced understanding of human resource management principles and practices

Experience to drive change

• 12-15+ years of managerial experience in information security including successfully managing mergers, acquisitions and related activities 
• Experience owning a security program as a cornerstone of a modern, scalable technology product portfolio
• Enterprise level experience including managing and successfully delivering cross functional initiatives 
• Demonstrable experience in implementing strategic plans and managing an information security program
• Executive and leadership communication skills that removes security nomenclature from the conversation and focuses on value and risk management
• Extensive experience in the design and testing of formal Key Controls in support of compliance to a range of regulatory and legislative requirements including HITRUST, HIPAA, and GDPR

How you will thrive 

In addition to competitive salaries, a 401k program with company match, bonus and a valuable health benefits package, VillageMD offers paid parental leave, pre-tax savings on commuter expenses, and generous paid time off. You work in a highly-collaborative, conscientious, forward-thinking environment that welcomes your experience and enables you to make a significant impact from Day 1. This fun, fast-paced, startup environment even comes complete with snacks. 

You also have the flexibility to contribute remotely. Most importantly, you make a difference. You see a clear connection between your daily work on VillageMD products and services and the advancement of innovative solutions and improved quality of healthcare for providers and patients.  

Our unique VillageMD culture – how inclusion and diversity make the difference 

At VillageMD, we see diversity and inclusion as a source of strength in transforming healthcare. We believe building trust and innovation are best achieved through diverse perspectives. To us, acceptance and respect are rooted in an understanding that people do not experience things in the same way, including our healthcare system. Individuals seeking employment at VillageMD are considered without regard to race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.  

Explore your future with VillageMD today.