Our mission is to make exceptional healthcare accessible anytime, anywhere, for everyone.
Assort is led by Jon (Founder of Shimmer, former UCSF med student, AI researcher at Stanford) and Jeff (ex-Facebook, first engineer at Cameo, former Head of Product Engineering at Athelas/Commure).
In 2023, we became the first agentic AI to answer patient calls. Since then, we've powered tens of millions of patient interactions, helping health organizations and patients provide better access to care. We're growing fast with millions in ARR every month.
We're well-funded and backed by Quiet Capital, First Round, Chemistry, and strategic angels from Flatiron, Athena Health, Mercury, and PathAI. More funding news coming soon :).
Join us to build Assort OS — a customizable fleet of genAI agents transforming patient-provider interactions.
About the Role
We are seeking our first-ever Head of Security — an individual contributor who will establish and lead Assort’s entire security function from the ground up. This role requires a hands-on leader who thrives in fast-paced, lean environments and is passionate about safeguarding healthcare data while enabling rapid innovation.
The Head of Security will own the full security lifecycle — from application and infrastructure protection to compliance, risk management, and incident response — with complete autonomy to design and implement a scalable, AI-driven security strategy.
What You'll Own
Security Strategy & Architecture
- Design, implement, and maintain Assort’s security posture across application, infrastructure, cloud, and data environments.
- Develop a long-term security roadmap aligned with company growth and regulatory requirements.
Risk Assessment & Threat Management
- Conduct proactive threat modeling, vulnerability scanning, and penetration testing.
- Develop and execute pragmatic remediation plans to address identified risks.
Compliance & Governance
- Establish lean, effective security guidelines and ensure adherence to HIPAA, BAA, and other applicable regulations.
- Lead third-party vendor security reviews and ongoing risk monitoring.
Incident Response & Recovery
- Develop and own incident detection, response, and post-mortem processes.
- Drive rapid resolution of security incidents and integrate lessons learned into ongoing improvements.
Security Automation & AI Enablement
- Leverage AI-driven tools and automation platforms to improve detection, reduce manual workload, and accelerate remediation.
- Continuously evaluate and integrate emerging security technologies.
Security Culture & Awareness
- Act as the internal security evangelist, raising awareness across teams without introducing unnecessary bureaucracy.
- Provide ongoing security training and guidance to employees.
What We’re Looking For
- Proven track record of independently managing security functions in startup or high-growth environments.
- Strong expertise across cloud, application, infrastructure, and data security domains.
- Hands-on experience with incident management and post-incident analysis.
- Comfort with leveraging AI tools to enhance security operations.
- Ability to balance pragmatic solutions with long-term strategic planning.
Preferred
- Direct experience with HIPAA compliance and healthcare data protection.
- Familiarity with generative AI systems, voice AI workflows, or healthcare technology platforms.
- Broad technical skill set paired with the ability to go deep in priority areas.
What’s In It for You
- High impact: Be the sole architect of Assort’s security strategy; your fingerprints will be all over our foundation.
- Maximum autonomy: No red tape, no layers: just you, your initiative, and room to execute.
- AI-friendly environment: You’ll work alongside our AI-centric engineering team, embedding security in cutting-edge tooling.
Other Benefits & Perks for Assorties
How We Work & What We Value
We have published our operating principles "Raising the BAARS in Healthcare" on our blog - they describe how we work at Assort. They cover how we aim to run projects, spend time and make decisions. Specifically:
- Back to basics
- Accessibility for all
- Always accountable
- Relentless resilience
- Ship fast, ship often
