Want to know if this job is worth applying to?
Burlingame, California, United States
Onsite
SuperDial is an AI company transforming revenue cycle operations by automating complex payer interactions and the administrative phone calls that slow healthcare down. Our voice automation platform handles mission-critical workflows on behalf of healthcare organizations, at scale.
Following our Series B, we are entering our next phase of growth. Our customers trust us with sensitive health and financial data, and the security of our platform and our company is foundational to that trust.
SuperDial is hiring its first Head of Security & IT: a hands-on leader who will own the company's security, compliance, and corporate IT functions end to end.
This is a builder role. You will set the security strategy, run our compliance programs, and keep our people, devices, and vendors secure, while partnering closely with Engineering on the security of the product itself. You will be the person customers, auditors, and leadership turn to when they need confidence that SuperDial is secure.
Success means audit-ready compliance programs, a corporate IT environment that is secure by default, and a security posture that scales with the company rather than slowing it down.
Compliance programs
Own SuperDial's compliance programs end to end, including SOC 2 and HIPAA (and future frameworks as customer needs evolve)
Drive audit readiness and lead evidence collection across the company
Write, maintain, and enforce security and compliance policies
Manage relationships with auditors and compliance vendors
Identify and close compliance gaps before they become customer or audit issues
Corporate IT
Manage devices, identity and access management (IAM), and SSO across the company
Enforce VPN usage and endpoint protection on all company devices
Administer core software and SaaS tools, including provisioning and license management
Oversee contractor-delivered IT support and hold vendors to clear service standards
Information security
Design, implement, and monitor security controls across the company
Run regular risk assessments and maintain the risk register
Lead vulnerability management, from identification through remediation
Own security monitoring arrangements, whether in-house or through managed providers
Build and test incident-response plans so the company is ready before an incident occurs
Employee lifecycle and training
Run security awareness training for all employees and contractors
Own the security side of onboarding and offboarding, partnering with People Ops
Ensure timely access provisioning and removal across all systems
Maintain the documentation that supports these processes for audits
Application security
Schedule and manage penetration tests, and define testing scope with Engineering
Track findings and drive remediation to closure with engineering owners
Partner with Engineering on secure development practices; you are accountable for the program, not for personally performing every technical review
Third-party security
Run vendor security assessments before onboarding new tools and partners
Manage vendor access controls and conduct ongoing reviews
Track vendor-related risks and contractual security obligations
Respond to customer security questionnaires and support security reviews in the sales process
7+ years in security, IT, or compliance, including at least 2 years leading a security or IT function
Direct ownership of a SOC 2 audit (Type II preferred) from readiness through report
Working knowledge of HIPAA security requirements and handling of protected health information (PHI)
Hands-on experience administering IAM/SSO (e.g., Okta, Google Workspace), MDM, and endpoint protection tools
Experience running vulnerability management, penetration testing programs, and incident-response planning
Experience assessing and managing third-party vendor risk
Comfort being both strategic and hands-on: writing the policy, configuring the tool, and presenting to leadership
Clear, confident communication with engineers, executives, auditors, and customers alike
Experience as the first security or IT hire at a venture-backed startup
Background in healthcare technology, revenue cycle management, or another regulated industry
Familiarity with compliance automation platforms (e.g., Vanta, Drata)
Exposure to cloud security (AWS or GCP) and AI/ML systems handling sensitive data
Relevant certifications such as CISSP, CISM, CISA, or Security+
Growth Mindset — We embrace challenges, continuous learning, and personal development.
Direct & Respectful Feedback — We value candid communication and fast feedback loops without ego.
Speed Matters — We move quickly, iterate often, and thrive in fast-paced environments.
High Standards — We care deeply about quality, details, and making sound decisions.
