Pelago
Director, Information Security + Compliance
$210K–$230K
New York, NY +1 · Director · Full-time · Posted Oct 8, 2026
- Location
- New York, NY
Manhattan, New York, United States - Visa sponsorship
- Unable to offer visa sponsorship for this position.
About the job
Leads Pelago’s information security and compliance strategy, maintaining certifications and protecting sensitive health data as the company and its AI platform grow.
What you'll do
- Own SOC 2 Type II and HITRUST audits, remediation, and recertification; manage the security roadmap, budget, and tooling.
- Lead incident response, vulnerability management, penetration testing, vendor risk reviews, and continuous control monitoring.
- Partner with Sales, Engineering, IT, and Legal on client security reviews, AI platform security, access management, and privacy; lead and grow the security team.
What they ask for
- Direct accountability for SOC 2 Type II and HITRUST outcomes.
- Experience leading information security and compliance in healthcare, health tech, or another regulated industry; strong working knowledge of HIPAA.
- Cloud security expertise in a modern stack, including AWS, infrastructure as code, containers, and CI/CD.
- Working knowledge across GRC, security operations, application security, and identity and access management; player-coach leadership experience.
Nice to have
- Experience securing AI/LLM systems, agentic tools, or model-workflow data.
- Certifications such as CISSP, CISM, CCSP, or HITRUST CCSFP.
Pay
$210,000 — $230,000 USD (base salary)
Tools
AWS, infrastructure as code, containers, CI/CD, SOC 2 Type II, HITRUST, HIPAA, GDPR
AI focus
Review new AI tools and partner with Engineering on security of Pelago’s AI platform; securing AI/LLM systems and model-workflow data is a plus.
Model-written summary · the original posting is authoritative