---
title: 'Director, Information Security + Compliance at Pelago'
canonical: 'https://feeny.ai/job/director-information-security-compliance-pelago-new-york-9j02vqv20z4d'
type: 'job'
last_seen: '2026-10-27'
---

# Director, Information Security + Compliance at Pelago

- **Company:** Pelago
- **Location:** New York, NY
- **Compensation:** $210k–$230k
- **Posted:** 2026-10-08
- **Last confirmed live:** 2026-10-27
- **Apply:** https://job-boards.greenhouse.io/pelago/jobs/5260683007

## Job description

Pelago is the leading specialty substance use care provider, built on the belief that effective treatment means matching care intensity to what each member actually needs rather than defaulting to the most expensive intervention. Our programs guide members through every stage of the substance use spectrum, from unhealthy habits to active use disorders, delivering personalized treatment for tobacco, alcohol, opioid, cannabis, and stimulant use based on individual health, habits, genetics, and goals.

With Sona, our voice-first AI Mental Health Specialist, Pelago now applies that same clinically-driven model to mental health, pairing deep clinical expertise with technology to expand access without compromising care quality. We believe technology should make clinical care more precise and more human, not replace the judgment behind it.

Pelago has scaled to helping hundreds of employers and health plans and has already helped more than 750,000 members better manage their substance use. If you're passionate about AI and making an impact on the health of others, join us and make it happen!

About Pelago Engineering:

Our engineering team operates as empowered, outcome-oriented problem solvers, working in close partnership with product, design, and clinical teams to improve member outcomes at scale.

As AI transforms how software is built, we are intentionally evolving our development lifecycle so we spend less time on mechanical implementation and more time on system design, judgment, and impact.

How We Work:

- Outcome-driven: Engineers are given problems to solve, not just features to build. Success is measured by learning, impact, and outcomes—not velocity alone
- AI-native: We use AI across the SDLC to accelerate implementation, testing, and review. Engineers focus on defining intent, validating behavior, and designing resilient systems
- High autonomy, high accountability: Teams have real ownership over their domains. With autonomy comes responsibility for quality, safety, and results
- Cross-functional by default: Engineers partner deeply with Product, Design, Data, and Clinical. Discovery, experimentation, and delivery are shared responsibilities
- Quality and safety matter: We build in a regulated, member-impacting domain. Reliability, observability, and correctness are first-class concerns

What You’ll Do:

Instead of task lists, anchor on ownership:

- Own meaningful problem spaces end-to-end, from discovery through delivery and iteration
- Design and evolve systems that support safe, scalable, AI-augmented development
- Use data and experimentation to validate whether solutions actually work
- Collaborate cross-functionally to balance member impact, clinical constraints, and technical tradeoffs
- Shape how we work—our tools, processes, and culture

What We Look For:

We explicitly assess for empowerment:

- You start with "why" before diving into "how"
- You're energized by ambiguity and collaborative problem-shaping
- You use AI to amplify your judgment and move faster on what matters
- You think in systems and anticipate second-order effects
- You want to own outcomes, not just ship features

Overview of the Role:

Pelago's clients trust us with some of the most sensitive data a person has, and our SOC 2 Type II and HITRUST certifications are central to how we earn and keep that trust. We already hold both. The Director of Information Security & Compliance will keep that foundation strong as our business, data, and AI platform grow, setting Pelago's security strategy and leading the team that executes it. The hire we're looking for has owned accreditation outcomes in a regulated environment, is hands-on enough to do the work alongside a small team, and has the commercial judgment to make security something that accelerates deals rather than slowing engineering down.

This is a hybrid role with a high-collaboration rhythm (3 days/week in our NYC office).

In this role you will:

- Own SOC 2 Type II and HITRUST certification end to end, including audits, remediation, and recertification.
- Develop and manage Pelago's security roadmap, budget, and tooling, and present key risks and recommendations to the executive team and Board.
- Serve as the security lead in client security reviews, RFPs, questionnaires, and partner due diligence, partnering with Sales to position our security posture as a competitive advantage.
- Maintain security policies and third-party vendor risk reviews, including reviews of new AI tools.
- Automate evidence collection and implement continuous control monitoring so compliance scales with the business.
- Own incident response, vulnerability management, and the penetration testing program.
- Partner with Engineering on security monitoring, disaster recovery, secure design, and the security of our AI platform.
- Partner with IT on identity and access management, and own the periodic access reviews our audits depend on.
- Partner with Legal on the privacy program (HIPAA, GDPR, BAAs) and lead breach assessments.
- Lead, coach, and grow the security team as a player-coach, building the case for and hiring the next people onto the team (1–2 direct reports today).
- Set the bar for the function: clear ownership, sustainable on-call, career paths, and performance expectations.
- Build security literacy across the company, from engineering to clinical, commercial, and operations teams.

The background we are looking for:

- Direct accountability for SOC 2 Type II and HITRUST outcomes.
- Experience leading information security and compliance in healthcare, health tech, or another regulated industry; strong working knowledge of HIPAA.
- Cloud security expertise in a modern stack (AWS, infrastructure as code, containers, CI/CD).
- Working knowledge across GRC, security operations, application security, and identity and access management.
- Player-coach leadership experience: hands-on in the work while building a team.
- Sound judgment about risk in a commercial context, including when to accept risk and when to escalate.
- Ability to communicate clearly with engineers, clients, auditors, executives, and the Board

Nice to haves:

- Experience securing AI/LLM systems, agentic tools, or data used in model workflows.
- Experience scaling a security program at a Series B or C company.
- Certifications such as CISSP, CISM, CCSP, or HITRUST CCSFP.
- Experience working with US health plans, PBMs, or large self-insured employers.

What you’ll love about us:

We have a whole host of perks for our people! From life essentials to nice-to-haves, there are more than a few good reasons to love working with us. We strive to ensure Pelago employees have equitable access to healthcare, wellbeing, time away, and then some.

- Generous and meaningful equity package
- Full Medical, Dental, & Vision coverage
- 401k Plan
- Unlimited PTO Policy, 10 paid holidays, & company wide “Me Time” Days
- Paid maternity, paternity & new parent leave
- Flexible working environment
- Annual Learning and Development stipend to support continued learning and career development
- Wellness Reimbursement Program
- Access to Reproductive & Family Planning Care
- Substance Use Support for employees and family members

At this time, we are unable to offer visa sponsorship for this position.

Please note that Pelago is dedicated to providing accommodations to candidates upon request. If you need accommodations at any point throughout the interview process, please reach out to your recruiter.

Before you apply, see how we build.

We write about our technical decisions, product philosophy, and the real challenges of scaling behavioral health. Read the blog → https://pelagohealth.ai/ The provided range reflects our US target salary range for this full-time position, which is part of our broader total compensation package, including incentive bonus program, stock options, comprehensive benefits, and incentive pay applicable to eligible roles. Individual pay within the range will vary based on a variety of factors like role-related experience and education, internal pay equity, and other relevant business factors. At Pelago, we are committed to an equitable and fair pay philosophy and review total compensation for our employees at least twice a year.

Base Pay Range $210,000—$230,000 USD

## About Pelago

## Company Overview
- **One-liner**: Pelago is a virtual clinic providing evidence-based, personalized substance use care for alcohol, tobacco, opioid, cannabis, and stimulant use through digital tools, live counseling, and medication-assisted treatment.
- **Entity Type**: Private (funded startup, $167M total funding in 8 rounds)
- **Headquarters**: New York, New York, USA (245 5th Ave, 18th Floor, NY 10016) with a secondary office in London, UK
- **Founded**: 2017
- **Founders**: Yusuf Sherwani, MD (CEO & Co-founder); co-founded by three physicians (names of the other two not publicly named)

## Core Business
- **Primary industry**: Digital healthcare / substance use disorder treatment (telemedicine)
- **Target customers**: B2B – employers (employer-sponsored benefits) and health plans
- **Mission/purpose**: “A world where everyone has access to substance use support – no matter what.” Breaking down barriers to care through a stigma-free, virtual-first model.

## Products & Services
- **Pelago Platform**: A digital-first substance use care program combining:
  - **Digital tools**: Cognitive Behavioral Therapy (CBT), habit tracking, educational content, round-the-clock virtual support
  - **Live clinical support**: Unlimited access to physicians, nurses, coaches, and counselors (same-day access nationwide)
  - **Medication-Assisted Treatment (MAT)**: Via PelagoRX – confidential prescriptions with pharmacy integration
  - **Remote monitoring**: At-home breathalyzers, urinary test kits for program outcomes and motivation
  - **Centers of Excellence**: Access to high-quality, clinically vetted inpatient facilities (e.g., RCA, Banyan) with care coordination
  - **Complex condition management**: Support for co-occurring mental illness and chronic conditions (e.g., diabetes, heart disease)
- **Programs for specific substances**: Alcohol, tobacco/nicotine, opioids, cannabis, and stimulants

## Market Standing
- **Valuation**: Not disclosed (private company)
- **Key Metric**: Total funding of $167.0M (8 rounds); estimated annual revenue of $10.0M (per LinkedIn, may be approximated)
- **Notable Investors/Partners**: Not explicitly named in search results, but trust from “hundreds of organizations” including employers and health plans
- **Growth Signals**:
  - 120 employees (+9.5% YoY, +15 people)
  - Published 15 peer-reviewed studies showing impact on engagement, clinical improvement, and medical savings
  - Reports $6.7k per participant medical cost savings in the first year; $11,829 annual savings per member (Aon analysis)
  - Clinical outcomes: 62% reduction in alcohol use within 30 days; 67% opioid-free for 3+ months; 44% tobacco-free at 12 months

## Competitive Advantages
- **Evidence-based differentiation**: Only substance use care solution with published, peer-reviewed evidence for both clinical impact and medical cost savings
- **Stigma-free, digital-first approach**: Low barrier to entry, private, confidential care that meets people where they are
- **Physician-led multidisciplinary team**: Founded and led by addiction specialists (MDs, PhDs) with deep clinical expertise
- **Comprehensive spectrum of care**: From digital tools to MAT to inpatient coordination, covering early intervention through complex management

## Strategic Focus
- Expand partnerships with employers and health plans across the US
- Deepen clinical research and outcomes measurement to showcase ROI
- Scale access to specialty substance use care nationally, with same-day availability
- Continue integrating technology (e.g., AI) to enhance personalization and monitoring (evidenced by AI Agent Engineer and Director, Clinical AI roles)

## Why Work Here
- **Culture**: Emphasizes teamwork, flexibility, and impact – “Change lives, shape your future”
- **Work arrangements**: Flexible hours and remote days; not fully remote but open to hybrid (NYC and London offices)
- **Benefits**: Competitive medical, dental, and vision insurance; generous paid time off; self-development budget for learning and growth
- **Engineering focus**: Active hiring for Product Engineer, Engineering Manager, AI Agent Engineer – building tech-enabled care at scale
- **Location**: Offices in New York (18th floor with city views) and London (Princelet Street, E1)

## Sources
1. [Pelago Health - Official Site](https://www.pelagohealth.com/)
2. [Pelago Careers Page (Greenhouse)](https://job-boards.greenhouse.io/pelago)
3. [Pelago About / Mission Page](https://www.pelagohealth.com/company/our-mission/)
4. [Pelago LinkedIn Profile](https://www.linkedin.com/company/pelago-health)

## Other roles at Pelago

- [Senior Product Designer](https://feeny.ai/job/senior-product-designer-pelago-new-york-s0rha93bccvc) — New York, NY
- [Sr. Manager, Integrated Marketing & ABM](https://feeny.ai/job/sr-manager-integrated-marketing-abm-pelago-new-york-745wk077ttj0) — New York, NY
- [Clinical Quality Program Manager](https://feeny.ai/job/clinical-quality-program-manager-pelago-remote-y047rexn7t0d)
- [Sr. Client Success Manager - Commercial](https://feeny.ai/job/sr-client-success-manager-commercial-pelago-remote-3g2f45yysavn)
- [Sr. Manager, Events](https://feeny.ai/job/sr-manager-events-pelago-new-york-d1y24scahj34) — New York, NY
- [Lifecycle Marketing Manager](https://feeny.ai/job/lifecycle-marketing-manager-pelago-new-york-xe8pv78rgjw5) — New York, NY
- [Medical Director, Clinical AI](https://feeny.ai/job/medical-director-clinical-ai-pelago-new-york-jdq68hbhqzfr) — New York, NY
- [Care Specialist](https://feeny.ai/job/care-specialist-pelago-remote-bydy5az5hecw)
- [Licensed Professional Counselor (GA,AR, IN, OH, WY, LA, MN, AZ)](https://feeny.ai/job/licensed-professional-counselor-ga-ar-in-oh-wy-la-mn-az-pelago-remote-r12861kz8336)
- [Sr. Analytics Engineer](https://feeny.ai/job/sr-analytics-engineer-pelago-new-york-w6ztys0d99sh) — New York, NY