--- title: 'Chief Information Security Officer at Qualified Health PBC' canonical: 'https://feeny.ai/job/chief-information-security-officer-qualified-health-pbc-united-states-9f6azww128e7' type: 'job' last_seen: '2026-10-31' --- # Chief Information Security Officer at Qualified Health PBC - **Company:** Qualified Health PBC - **Location:** United States - **Employment:** full-time - **Work type:** remote - **Posted:** 2026-10-28 - **Last confirmed live:** 2026-10-31 - **Apply:** https://jobs.ashbyhq.com/qualified-health-pbc/f6c8aa53-648c-43a2-ba3a-a09263399c98 ## Job description Transform healthcare with us. At Qualified Health, we're redefining what's possible with Generative AI in healthcare. Our infrastructure provides the guardrails for safe AI governance, healthcare-specific agent creation, and real-time algorithm monitoring, working alongside leading health systems to drive real change. This is more than just a job. It's an opportunity to build the future of AI in healthcare, solve complex challenges, and make a lasting impact on patient care. If you're ambitious, innovative, and ready to move fast, we'd love to have you on board. Job Summary As Qualified Health scales its AI platform across leading health systems and pharmaceutical sponsors, security is fundamental to protecting sensitive data, earning customer trust, and deploying AI responsibly in healthcare. As our Chief Information Security Officer (CISO), you will own our enterprise security strategy, risk posture, and security and privacy program end to end. You will partner with executive leadership, Engineering, Product, Legal, and Commercial to embed security and data privacy into our products, infrastructure, AI workflows, and business operations. You will lead our approach to security governance, healthcare compliance, incident response, and enterprise customer trust while building the capabilities needed to support our continued growth. This is an executive leadership role that combines strategic ownership with technical depth. You can translate complex security risks into clear business decisions, work directly with engineering teams on critical technical challenges, and build a rigorous security program without creating unnecessary friction for the business. ## Key Responsibilities Security Strategy & Executive Leadership - Own Qualified Health’s enterprise security strategy, risk posture, and roadmap, aligning priorities and investments with business objectives and the evolving threat landscape. - Advise executive leadership on material risks, risk acceptance decisions, security investments, and the implications of new products and customer engagements. - Establish security governance, policies, metrics, and accountability across the organization. - Build out and scale the security organization, determining the right mix of internal expertise, external partners, and essential capabilities as the company grows. Product, Cloud & AI Security - Set technical security direction across application security, cloud infrastructure, identity and access management, vulnerability management, and secure software development. - Partner with Engineering and Product to embed security into architecture, development, testing, deployment, and production operations. - Establish safeguards for AI-enabled products and workflows, including protection of PHI across LLM integrations, AI agents, data pipelines, and connected systems. - Work directly with engineering leaders to resolve high-impact technical risks while balancing security rigor with product velocity. - Provide strategic direction and technical leadership in the design and implementation of a secure AI infrastructure, aligning architecture, governance, and risk controls with organizational security objectives and compliance requirements. - Oversee DevOps and cloud infrastructure during our current growth phase, ensuring reliable, scalable, and secure platform operations. Healthcare Compliance & Enterprise Trust - Own the security program supporting HITRUST, SOC 2, and applicable customer and regulatory requirements, including control design, audit readiness, and ongoing effectiveness. - Partner with Legal, Privacy, Engineering, and business leaders to translate contractual and regulatory obligations into practical controls. - Serve as the senior security counterpart to health system and pharmaceutical customers, leading security diligence, technical assessments, and escalations. - Partner with Commercial and Customer Success to resolve security-related deal blockers and build confidence in Qualified Health's security posture. - Evaluate third-party and vendor risks, and determine when additional frameworks or certifications, such as HITRUST, are warranted. Incident Response & Operational Resilience - Own the security incident response program, including detection, escalation, investigation, containment, recovery, and post-incident remediation. - Establish and test incident response, business continuity, and disaster recovery plans, coordinating with executive leadership, Legal, customers, and external specialists when needed. - Support the Privacy Team in meeting HIPAA and state privacy law reporting obligations with robust risk assessments, incident response, and audit readiness processes. - Build the operating model, tools, processes, and external partnerships needed to maintain effective security operations as the company scales. - Drive security awareness and clear security ownership across Engineering, IT, and other business functions. Required Qualifications - 12+ years of experience in information security or cybersecurity, including significant leadership experience at enterprise or high-growth technology companies. - Experience operating at CISO, VP of Security, or equivalent senior leadership level, with accountability for enterprise security strategy, risk management, and executive engagement. - Track record of building and scaling security programs, including foundational controls, governance, technical capabilities, and teams. - Deep technical understanding of cloud security, application security, identity and access management, vulnerability management, and incident response. - Experience owning or leading HIPAA and SOC 2 program success, including control implementation, audit readiness, and remediation. - Experience protecting sensitive or regulated data and translating compliance requirements into effective technical controls. - Experience leading enterprise customer security reviews and communicating security posture and risk to senior stakeholders. - Ability to influence executive leadership and cross-functional teams while balancing risk management with business priorities. Desirable Qualifications - Experience at a high-growth healthcare technology, healthcare AI, life sciences technology, or enterprise SaaS company. - Experience securing AI-enabled applications, LLM-based systems, AI agents, or platforms handling sensitive healthcare data. - Experience with HITRUST, NIST Cybersecurity Framework, or NIST AI Risk Management Framework. - Experience presenting security posture, material risks, and investment recommendations to a board or board-level committee. - Hands-on experience leading or working closely with DevOps, SRE, or platform engineering teams. - Relevant certifications such as CISSP, CISM, or CCSP. Why Join Qualified Health? This is an opportunity to join a fast-growing company and a world-class team that is poised to change the healthcare industry. We are a passionate, mission-driven team building a category-defining product. We are backed by premier investors and are looking for founding team members who are excited to do the best work of their careers. Our employees are integral to achieving our goals, so we are proud to offer competitive salaries with equity packages, robust medical/dental/vision insurance, flexible working hours, hybrid work options, and an inclusive environment that fosters creativity and innovation. Our Commitment to Diversity Qualified Health is an equal opportunity employer. We believe that a diverse and inclusive workplace is essential to our success, and we are committed to building a team that reflects the world we live in. We encourage applications from all qualified individuals, regardless of race, color, religion, gender, sexual orientation, gender identity or expression, age, national origin, marital status, disability, or veteran status. Pay & Benefits The pay range for this role is between $260,000 and $330,000, and will depend on your skills, qualifications, experience, and location. This role is also eligible for equity and benefits. Join our mission to revolutionize healthcare with AI. To apply, please send your resume through the application below. ## About Qualified Health PBC ## Company Overview - **One-liner**: Qualified Health is the healthcare-native enterprise AI platform that enables health systems to safely deploy, govern, and scale AI across clinical, operational, and financial workflows. - **Entity Type**: Private (Series B) - **Headquarters**: Palo Alto, California, United States - **Founded**: 2024 - **Founders**: Justin Norden (CEO), Kedar Mate (CMO), Beau Norgeot (Chief AI Officer) ## Core Business - **Primary industry**: Healthcare AI infrastructure and governance - **Target customers**: B2B – large health systems, academic medical centers, and clinically integrated networks - **Mission**: To help health systems deploy safe, compliant, and impactful AI at enterprise scale by providing a unified platform with built-in governance, monitoring, and outcomes tracking. ## Products & Services - **Qualified Health Platform**: A single, healthcare-native enterprise AI platform that includes a governed operating layer, one data integration, agent builder tools, workforce education, and a curated library of validated AI solutions. Covers HIPAA-compliant guardrails, real-time monitoring, audit trails, and role-based access controls. ## Market Standing - **Valuation**: Not publicly disclosed - **Key Metrics**: Annual revenue ~$3.1M (LinkedIn); total funding $155M (Series B of $125M led by New Enterprise Associates, Seed of $30M led by Town Hall Ventures and Frist Cressey Ventures) - **Notable Investors/Partners**: New Enterprise Associates (lead Series B), Town Hall Ventures, Frist Cressey Ventures - **Growth Signals**: 10× revenue growth in the past year; 241.9% YoY headcount growth (75 employees); reached over 500,000 users across top US health systems; identified $37M in run-rate value in 10 days for one partner; $15M in value realized within six months for another; platform go-live in under one month ## Competitive Advantages - **Healthcare-native governance**: Governance is built into the platform, not bolted on, with risk-based guardrails, human-in-the-loop controls, and continuous post-deployment monitoring. - **Single integration**: Connects once to core clinical, operational, and financial systems to power every AI workflow, eliminating duplicate data extraction. - **Deep domain expertise**: Founders and team bring experience from Waymo (self-driving safety), Stanford Medicine, IHI, and major health systems – they understand regulated environments firsthand. - **Proven traction**: Over 500,000 users on the platform with measurable clinical, operational, and financial outcomes. ## Strategic Focus - Scale safely: Continue deploying the platform across more health systems while maintaining rigorous compliance and safety standards. - Bold innovation: Expand agent and workflow builder tools to empower health system teams to create their own AI solutions on a governed foundation. - Last-mile delivery: Operate as an embedded partner to drive adoption, measure ROI, and tune solutions for sustained impact. ## Why Work Here - **Culture**: High-talent-density team with backgrounds from Waymo, Stanford, Elevance Health, and top consultancies. Emphasis on safety as an enabler of speed in healthcare. - **Growth trajectory**: Fast-growing (10× revenue, 241% headcount growth) with a clear path to becoming a category-defining company in healthcare AI. - **Mission-driven**: Direct impact on reducing clinician burnout, improving patient outcomes, and lowering healthcare costs. - **Work environment**: Based in Palo Alto, CA with international presence (Italy, Canada, South Korea). Remote/hybrid policy not explicitly stated but likely flexible; check current job postings for specifics. - **Perks**: Competitive salaries (e.g., Software Engineer ~$106K); the opportunity to shape the operating system for AI in healthcare alongside industry leaders. ## Sources 1. [qualifiedhealthai.com](https://www.qualifiedhealthai.com/) 2. [qualifiedhealthai.com/careers](https://www.qualifiedhealthai.com/careers) 3. [qualifiedhealthai.com/about-us](https://www.qualifiedhealthai.com/about-us) 4. [linkedin.com](https://www.linkedin.com/company/qualifiedhealth) 5. [bloomberg.com](https://www.bloomberg.com/profile/company/2540760D:US) ## Other roles at Qualified Health PBC - [Program Manager, OER](https://feeny.ai/job/program-manager-oer-qualified-health-pbc-united-states-5csc7tdgrkkx) — United States - [Senior Program Manager, Life Sciences](https://feeny.ai/job/senior-program-manager-life-sciences-qualified-health-pbc-united-states-be8b5d9m7f7x) — United States - [Principal Backend Engineer](https://feeny.ai/job/principal-backend-engineer-qualified-health-pbc-palo-alto-f9776fmhnqeb) — Palo Alto, CA - [Lead AI Engineer](https://feeny.ai/job/lead-ai-engineer-qualified-health-pbc-palo-alto-tqbpbmkvb6bf) — Palo Alto, CA - [Staff Applied AI Engineer](https://feeny.ai/job/staff-applied-ai-engineer-qualified-health-pbc-palo-alto-e0yzfedsm30k) — Palo Alto, CA - [Controller](https://feeny.ai/job/controller-qualified-health-pbc-palo-alto-mqra0x8q111t) — Palo Alto, CA - [Senior Product Manager, AI Infrastructure](https://feeny.ai/job/senior-product-manager-ai-infrastructure-qualified-health-pbc-palo-alto-1b2bnnhzv78d) — Palo Alto, CA - [Commercial Counsel](https://feeny.ai/job/commercial-counsel-qualified-health-pbc-united-states-v278pkm946zt) — United States - [Business Analyst](https://feeny.ai/job/business-analyst-qualified-health-pbc-palo-alto-8p16530da1n2) — Palo Alto, CA - [Senior AI PM for Data and Governance](https://feeny.ai/job/senior-ai-pm-for-data-and-governance-qualified-health-pbc-palo-alto-66e1kez2424x) — Palo Alto, CA