Director of Security & Compliance

OUR MISSION: HOSPITAL-QUALITY CARE, EVERYWHERE. The healthcare industry still relies on faxes and phone tag to coordinate critical care for patients at home. We think patients and the clinicians who serve them deserve better than a system stuck in 1995. Verse Medical is building the modern software infrastructure to make it happen. We're a well-funded Series C company (backed by General Catalyst, SignalFire, and Sapphire Ventures) on a mission to heal a fragmented system. Our platform connects the dots between providers, payors, and patients, ensuring people get the high-quality care they need, reliably and right where they live. We’re growing fast and looking for people who are driven by this mission to join us! OUR VALUES: THE PRINCIPLES THAT GUIDE US Our values are the operating system for how we work together and with our partners. They aren't just words on a wall; they are the principles we bring to every decision, every day. - We are transparent, upfront and direct. We operate with honesty and clarity. We share information openly, the good and the bad, and believe that direct, respectful feedback is the foundation of trust and progress. - We value speed of iteration. We are building something new, which means we learn by doing. We prioritize rapid iteration and getting solutions into the hands of users, believing that progress is more valuable than perfection. - We give 110% effort, 30% of the time. We are passionate about our mission, and there are moments that require us to go the extra mile. We believe in focused intensity when it counts, balanced by a sustainable pace that keeps our team energized for the long run. - We empathize with customers to a fault. When our users face a problem, we own it. Instead of asking them to change, we ask ourselves, "How can we make this better?" We believe true innovation comes from deep empathy and a relentless focus on solving the real-world challenges of healthcare. JOB TITLE: DIRECTOR OF SECURITY & COMPLIANCE We're hiring a Director of Security & Compliance to own and build our security program. This is a high-impact role where you'll define our security architecture, lead our HITRUST certification effort as technical owner, and protect the patient data at the heart of our platform. You'll work as a hands-on player-coach, partnering closely with engineering and compliance to keep us secure without slowing us down. If you enjoy high ownership, building programs rather than inheriting them, and being the senior-most security voice in a fast-growing company, this role is for you. WHAT YOU'LL ACHIEVE: A GLIMPSE INTO YOUR CONTRIBUTIONS - Own and drive the company-wide security strategy and roadmap, balancing risk reduction with the speed of a Series C product organization - Serve as the owner for HIPAA compliance and our ongoing HITRUST certification effort, implementing and operating the underlying controls - Serve as the senior-most security voice in the company, advising executive leadership on risk posture, security investments, and tradeoffs - Implement and operate technical security controls: vulnerability management, endpoint protection, logging and monitoring, detection and response - Lead incident response, including playbook development, on-call structure, tabletop exercises, and post-incident reviews - Build the security team over time, starting as a hands-on player-coach and hiring once the program scales WHAT YOU'LL BRING: THE SKILLS AND EXPERIENCE YOU’LL LEVERAGE We believe that diverse experiences and backgrounds lead to better solutions. While we have an idea of what will help someone succeed in this role, we are open to being convinced by your unique story and skills. If you believe you can achieve the outcomes above, we encourage you to apply. Core Skills & Experience: - 8+ years in security, compliance, or information security, with at least 2–3 years as a senior leader or subject matter expert at a startup or growth-stage company - Direct experience owning HIPAA, H