Spring Health
Chief Information Security Officer (CISO)
$299K–$344K
New York (Hybrid) +1 · Hybrid · Full-time · Posted Sep 14, 2026
- Location
- New York (Hybrid)
San Francisco, CA (Hybrid) - Experience
- 15+ years; significant experience in executive security leadership roles.
About the job
Leads Spring Health’s enterprise information security, compliance, technology risk, and IT strategy to protect sensitive data while enabling growth, innovation, and operational scale.
What you'll do
- Lead the Information Security, Compliance/GRC, and IT organizations, including security operations, product and cloud security, corporate IT, and identity and access management.
- Advise executive leadership and the Board on cybersecurity risk, compliance, resilience, incidents, and security investments.
- Govern AI security, enterprise compliance, customer trust processes, and security and IT integration work related to Alma.
What they ask for
- 15+ years of progressive experience in information security, cybersecurity, IT, technology risk, or related disciplines, including significant executive security leadership.
- Demonstrated experience leading multi-functional security organizations and leading or closely partnering with IT functions.
- Deep working knowledge of HIPAA and hands-on security and compliance program leadership in a covered entity or business associate environment.
- Experience with relevant compliance programs and communicating cybersecurity and technology risk to executive and Board-level audiences.
Nice to have
- One or more relevant industry certifications, such as CISSP, CISM, CCISO, CRISC, or CISA.
Pay
$299,000 - $344,000 USD base salary; $299K – $344K USD base salary
Tools
HIPAA, HITRUST, SOC 2, ISO 27001, PCI DSS, GDPR, CCPA, SIEM
AI focus
Defines AI security strategy, enterprise AI guardrails, approved tool usage, data classification, model/tool risk assessment, and controls for secure AI adoption.
Model-written summary · the original posting is authoritative