About the Role

We are seeking our first-ever Head of Security — an individual contributor who will establish and lead Assort’s entire security function from the ground up. This role requires a hands-on leader who thrives in fast-paced, lean environments and is passionate about safeguarding healthcare data while enabling rapid innovation.

The Head of Security will own the full security lifecycle — from application and infrastructure protection to compliance, risk management, and incident response — with complete autonomy to design and implement a scalable, AI-driven security strategy.

What You'll Own

Security Strategy & Architecture

• Design, implement, and maintain Assort’s security posture across application, infrastructure, cloud, and data environments.
• Develop a long-term security roadmap aligned with company growth and regulatory requirements.

Risk Assessment & Threat Management

• Conduct proactive threat modeling, vulnerability scanning, and penetration testing.
• Develop and execute pragmatic remediation plans to address identified risks.

Compliance & Governance

• Establish lean, effective security guidelines and ensure adherence to HIPAA, BAA, and other applicable regulations.
• Lead third-party vendor security reviews and ongoing risk monitoring.

Incident Response & Recovery

• Develop and own incident detection, response, and post-mortem processes.
• Drive rapid resolution of security incidents and integrate lessons learned into ongoing improvements.

Security Automation & AI Enablement

• Leverage AI-driven tools and automation platforms to improve detection, reduce manual workload, and accelerate remediation.
• Continuously evaluate and integrate emerging security technologies.

Security Culture & Awareness

• Act as the internal security evangelist, raising awareness across teams without introducing unnecessary bureaucracy.
• Provide ongoing security training and guidance to employees.

What We’re Looking For

• Proven track record of independently managing security functions in startup or high-growth environments.
• Strong expertise across cloud, application, infrastructure, and data security domains.
• Hands-on experience with incident management and post-incident analysis.
• Comfort with leveraging AI tools to enhance security operations.
• Ability to balance pragmatic solutions with long-term strategic planning.

Preferred

• Direct experience with HIPAA compliance and healthcare data protection.
• Familiarity with generative AI systems, voice AI workflows, or healthcare technology platforms.
• Broad technical skill set paired with the ability to go deep in priority areas.

What’s In It for You

• High impact: Be the sole architect of Assort’s security strategy; your fingerprints will be all over our foundation.
• Maximum autonomy: No red tape, no layers: just you, your initiative, and room to execute.
• AI-friendly environment: You’ll work alongside our AI-centric engineering team, embedding security in cutting-edge tooling.

Other Benefits & Perks for Assorties

• Competitive Compensation – Including salary and employee stock options so you share in our success.
• Lifelong Learning – Annual budget for professional development, plus training opportunities to help you grow.
• Office Setup Stipend – We’ll outfit your in-office workspace so comfy as it's productive.
• Top-Tier Health Coverage – Medical, dental, and vision insurance, because your health comes first.
• Unlimited PTO – We trust you to take the time you need to recharge and come back ready to crush it.
• Meals & Snacks – Lunch, dinner, and snack breaks that fuel great ideas.
• Wellness Stipend – Your physical and mental well-being matters, and we’ve got a yearly stipend to prove it.
• 401(k) – Let us help you plan for the future. We’ve got you covered.
• Start-up upside: Shape a foundational function in a company scaling rapidly.

How We Work & What We Value

We have published our operating principles "Raising the BAARS in Healthcare" on our blog - they describe how we work at Assort. They cover how we aim to run projects, spend time and make decisions. Specifically:

• Back to basics
• Accessibility for all
• Always accountable
• Relentless resilience
• Ship fast, ship often