Solving healthcare capacity. Powering boundless, seamless care experiences. Streamlining virtual & in-person care.
The Role
Leads security operations and corporate IT for a healthcare technology company handling PHI. Responsibilities include incident response, application and cloud security, IAM, endpoint management, vendor reviews, security policies, compliance support for HIPAA, SOC 2, and HITRUST, and management of three direct reports. The role also builds AI-driven automation tools and workflows for IT and security operations while partnering with executives, engineers, customers, auditors, and compliance leaders.
Summary Generated by Built In
About Fabric Health
About the Role
What You'll Do
Why You Might Be a Good Fit
This Might Not Be The Right Fit If...
Your Qualifications
Bonus Points
The national pay range for this role is $160,000.00 – $180,000.00 per year. Actual compensation will be determined by factors such as the candidate's geographic market, experience, skills, and qualifications. Certain roles may also be eligible for additional compensation, including a comprehensive benefits package such as medical, dental, vision, unlimited PTO, and a 401(k) plan, stock options and bonuses. If your compensation requirement is greater than our posted range, please still consider applying; a determination can be made based on unique qualifications. Expected compensation ranges for this role may change over time.At Fabric, we believe that a diverse workforce is essential to our success. We are an equal opportunity employer and are committed to creating an inclusive environment for all employees. We do not discriminate on the basis of race, color, religion, sex, national origin, age, disability, veteran status, or any other legally protected characteristic. We actively encourage individuals from all backgrounds to apply.
Recruitment Fraud Alert: Protect Yourself
At Fabric Health, we are powering boundless care by solving healthcare’s biggest challenge: clinical capacity. We aren’t here to disrupt healthcare; we’re here to fix it. We unify the care journey from intake to treatment, using intelligent automation to remove administrative burdens and make care delivery 2-10x more efficient. Our technology empowers clinicians to move faster and focus on what matters most: the patient.
We are a mission-driven team of brilliant minds trusted by leading organizations including Intermountain Health, OSF HealthCare, SSM Health, and MUSC Health. Our vision is backed by premier investors such as Thrive Capital, GV (Google Ventures), General Catalyst, and Salesforce Ventures. We move quickly for good reason, listen deeply to solve big challenges, and build products with the same care and quality we’d want for our own loved ones.
Learn more: About Us | News & Press | LinkedIn | Careers
Scaling security in a regulated environment requires a leader who sets the high-level strategy and actively builds alongside their team rather than leading from a distance. As the Manager of Security and IT, you run security operations and own corporate IT for a healthcare technology company handling PHI at scale. You partner closely with the compliance program owner to uphold HIPAA and SOC2 standards, serving as the influential voice on what security investments matter and what can wait. This is a highly hands-on role where you do not just delegate; you influence policy, run identity, own the endpoint program, lead incident response, and review vendors.
Building and scaling this program starts with managing and mentoring a tight-knit team. Leadership here goes beyond standard management to cultivating a culture of technical innovation. You bring an engineering mindset to IT operations by developing custom AI tools, agents, and automation pipelines that bypass standard vendor limitations. More importantly, you serve as a technical mentor, coaching your team to build their own AI competencies so they can architect internal tools that multiply the entire department's impact.
As the Manager of Security and IT, you operate as a hands-on leader. Your primary responsibilities include:
Security Leadership & Incident Response
- Lead Fabric's security program across application security, security operations, identity and access management, endpoint security, cloud security, and vendor security.
- Own incident response end-to-end, covering detection, triage, response, post-mortems, and the structural improvements that follow.
- Lead customer security questionnaire responses and vendor security reviews, acting as a credible authority who can speak to a CISO at a health system and earn their trust.
- Set security policies and standards that engineering, product, and operations can practically follow.
- Represent security in executive conversations about risk, investment, and technical tradeoffs.
Corporate IT & AI Automation
- Own corporate IT operations, including the identity platform (Okta or equivalent), MDM, endpoint management, helpdesk, hardware, and SaaS provisioning.
- Build and deploy custom AI tools, agents, and automated workflows to scale IT and security operations, moving beyond standard vendor defaults.
Team Leadership & Compliance
- Manage and mentor a team of three direct reports, helping them grow their careers and empowering them to integrate AI into their daily workflows.
- Partner with the owner of our compliance program to feed evidence, implement controls, and operationalize SOC2, HITRUST, and HIPAA requirements without bottlenecking either side.
- You bring seasoned security expertise, combining proven leadership experience with an extensive, hands-on background across security operations.
- You have actually run corporate IT, not just had it report to you. You know what good identity hygiene looks like, you have debugged endpoint issues yourself, and you have handled an offboarding crisis at 9 p.m.
- You can do both: set the program and do the work. This is not a delegate-everything role at this stage.
- You think identity-first. Most security failures route through identity, and you build defenses with that as the starting assumption.
- You have worked in healthcare or another regulated industry where the rules genuinely matter and audits are part of the rhythm.
- You can talk to engineers without losing them and to executives without confusing them.
- You are a passionate AI practitioner who has proven experience building custom AI workflows, agents, and automation tools to solve complex security and IT challenges.
- You want a pure CISO seat where you set policy and someone else implements. We are too early for a delegate-everything role.
- You have not actually run corporate IT before. Reporting to you is not the same as having done the work.
- You are uncomfortable being the security and IT person. This is a dual-hat role and stays that way until we are larger.
- You need a fully built program. We have foundations but not maturity; you will be building.
- You prefer strictly out-of-the-box vendor configurations over engineering custom AI-driven automation.
Your Qualifications
- 7+ years of security experience with at least 2 years in a security leadership or management role.
- Direct experience managing corporate IT operations, including identity, endpoint, MDM, SaaS provisioning, and the helpdesk.
- Proven application security or cloud security background. You will partner closely with our Application Security Engineer and must possess the technical depth to lead them, not just manage them.
- Experience operating in a healthcare or highly regulated industry environment handling PHI under HIPAA.
- Working knowledge of SOC2 and HIPAA frameworks, with HITRUST familiarity as a plus.
- Management experience overseeing 1 to 3 direct reports, ideally including building a function from a small base and actively guiding career development.
- Proven track record of building and deploying custom AI tools, agents, or automated workflows to streamline IT and security operations.
- Hands-on experience with Okta or another modern IAM/SSO platform.
- AWS or GCP cloud security depth.
- Prior incident response leadership at a healthcare or regulated company.
- HITRUST or NIST 800-66 specific familiarity.
- Experience working with external auditors and assessors.
Fabric Health is aware of scammers attempting to impersonate employers. To ensure that any recruiting contact you receive is legitimate, please adhere to the following:
- Verify the Domain: Official recruitment emails will only come from addresses ending in @fabrichealth.com or @gem.com. No other domain names are legitimate.
- Official Interview Tools: We use Gem for our recruitment process and Google Meet for all video interviews. Google Meet is always the platform used for your first interview; you will never be sent a Zoom link to set up or conduct an initial interview. All interviews are conducted via video unless specifically stated by our team as an audio call. We never conduct interviews via chat, social media, Skype, or WhatsApp.
- Zoom Usage: Zoom is utilized only for specific meetings set directly by our team for purposes outside of the standard interview process (e.g., coordination or onboarding discussions). It is never the first link you will receive from us.
- Authorized Contact & Texting: Fabric will only contact you if you have submitted an application or if you are connected to a current employee who shared your information with us. We will only send text messages if you have provided explicit authorization and consent, either through your application or while communicating directly with our team. If you have not explicitly authorized us to reach out, treat any SMS or unsolicited outreach as fraudulent and do not respond.
- Sensitive Data: We will never ask you for sensitive personal or financial documents (ID, banking info, SSN) during the application, interview, or candidacy stages. All sensitive data is handled through secure internal systems post-offer.
- Verify the Team: You can reference LinkedIn to verify members of our recruiting team; however, please remain vigilant as scammers may create fraudulent profiles. Always cross-reference the sender's email domain with our official @fabrichealth.com address.
If you question the validity of a contact or receive a suspicious message, do not click any links. Please submit a report via this link: https://forms.gle/N1AGAiXcAL2W57H9A
Please note: The security inbox is for reporting fraudulent activity only. Do not email this address for application status updates or to share application materials, as these will not be reviewed. Applications are only accepted and reviewed if submitted through our official application portal, and no application status information will be provided via the security email.
Skills Required
- 7+ years of security experience
- At least 2 years of security leadership or management experience
- Direct experience managing corporate IT operations, including identity, endpoint, MDM, SaaS provisioning, and helpdesk functions
- Application security or cloud security experience with sufficient technical depth to lead an Application Security Engineer
- Experience in healthcare or another highly regulated industry handling PHI under HIPAA
- Working knowledge of SOC 2 and HIPAA frameworks
- Management experience overseeing 1 to 3 direct reports
- Experience building a function from a small base and guiding career development
- Proven experience building and deploying custom AI tools, agents, or automated workflows for IT and security operations
- Hands-on experience with Okta or another modern IAM/SSO platform
- AWS or GCP cloud security expertise
- Incident response leadership experience at a healthcare or regulated company
- HITRUST or NIST 800-66 familiarity
- Experience working with external auditors and assessors
Fabric Health Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Fabric Health and has not been reviewed or approved by Fabric Health.
-
Fair & Transparent Compensation — Pay is considered aligned with role expectations, with explicit remarks that compensation reflects the demands of the work and “pay rate” highlighted as a strength.
-
Leave & Time Off Breadth — Time off is described as generous, with unlimited PTO in some roles and a company holiday period that includes a full week off at year‑end.
-
Equity Value & Accessibility — Equity is available to full‑time employees, and multiple role descriptions highlight stock options as part of total rewards.
Fabric Health Insights
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Fabric Health is a pioneering care access platform dedicated to solving one of healthcare's most pressing challenges: operational capacity. We equip health systems, health plans, employers, and brokers with consumer-grade solutions designed to make healthcare faster, smarter, and more accessible at the exact moment of need. Our core mission is to empower boundless care through seamless, intuitive experiences that benefit both patients and providers. At the heart of our offering is a commitment to streamlining the entire care journey. We achieve this by integrating and optimizing every touchpoint from initial intake and intelligent triage to precise routing and effective treatment, encompassing both virtual and in-person care modalities. Our platform is meticulously crafted to enhance operational efficiency, addressing the complex logistical problems that often hinder timely and quality care delivery. What makes Fabric Health uniquely effective is our deep understanding of the patient and clinician experience. We develop robust automation workflows that significantly reduce administrative burdens on healthcare professionals, allowing them to focus invaluable time on what matters most: direct patient care. By automating repetitive tasks and streamlining processes, we enable clinicians to work more efficiently, leading to reduced burnout and a higher quality of service. Our comprehensive suite of features and services includes an advanced AI Assistant that guides users, dynamic Engagement & Pathways to ensure continuity of care, a versatile Virtual Care Platform for remote consultations, and dedicated Virtual Care Services for immediate support. Furthermore, our Intake & Care Guides simplify initial patient interactions, while our Enterprise Features provide scalable solutions for large organizations. Ultimately, Fabric Health drives tangible outcomes: reduced care costs, expanded access to care, and the delivery of consistent, higher-quality patient experiences. We are relentlessly focused on creating better, more intuitive interactions for consumers and equipping providers with the tools they need to deliver exceptional care efficiently. Every solution we develop is a testament to our dedication to transforming healthcare delivery, ensuring that timely, compassionate, and effective care is within everyone's reach.
Why Work With Us
Discover a culture of innovation, collaboration, and continuous growth. We offer a dynamic, remote-first environment where talented individuals thrive by tackling meaningful challenges. Contribute to cutting-edge solutions, work alongside inspiring peers, and truly make a difference in a flexible setting. Grow your career with purpose.
