Chief Information Security Officer

Chief Information Security Officer

Sword Health is on a mission to free two billion people from pain. With 67% of members achieving a pain-free life and a 70% reduction in surgery intent, at Sword, we are using AI Care to change lives, and save millions for our 25,000+ enterprise clients across three continents. Today, we hold the majority of industry patents, win 70% of competitive evaluations, and have raised more than $300 million from top venture firms like Founders Fund, Sapphire Ventures, General Catalyst, and Khosla Ventures.

Recognized as a Forbes Best Startup Employer in 2025, this award highlights our focus on being a destination for the best and brightest talent. Not only have we experienced unprecedented growth since our market debut in 2020, and we've also created a remarkable mission and value-driven environment that is loved by our growing team. With a recent valuation of $3 billion, we are in a phase of hyper growth and expansion, and we're looking for individuals with passion, commitment, and energy to help us scale our global impact.

Joining Sword means committing to a set of core values, chief amongst them to "do it for the patients" every day, and to always "deliver more than expected" on behalf of our members and clients. This is an opportunity for you to make a significant difference on a massive scale as you work alongside 900+ (and growing!) talented colleagues, spanning three continents.

Your charge? To help us build a pain-free world, powered by AI, enhanced by people accessible to all. As Chief Information Security Officer, you'll be responsible for creating and managing a global, enterprise wide security strategy and program. Reporting to the Chief Scientific Officer, you will work cross functionally with our Engineering, Product, Operations, and HR teams to create strategies, policies, and frameworks as they relate to application security, compliance, and security operations.

• Define and drive Sword's information security roadmap, strategy, tactics, and execution
• Architect programs and processes that evaluate and enhance Sword's information security policies and ensure the security of Sword's security perimeter through monitoring, remediation, reporting, and auditing
• Partner with Sword's engineering and product teams during scoping and execution of all roadmap deliverables to ensure that security concerns are treated as first class product requirements
• Respond appropriately and effectively to security-related incidents and report back to key internal and external stakeholders
• Participate in externally requested security audits from partners
• Lead efforts to continuously review and update company-wide information security policies to align with industry best practices
• Oversee and coordinate security efforts across the company alongside Privacy, Engineering, Ops, HR, Product, and more
• Stay up to date with IT / Security industry trends and evaluate new solutions & techniques
• Launch company-wide security initiatives and training
• Partner with commercial and customer success teams to support customer acquisition and retention.

• ~10 years of experience building and leading security teams focused on all aspects of cybersecurity, including identity management, software security, GRC, and security operations, with increasing responsibilities
• Overseen security teams and vendor management
• Experience leading SOC 2, HITRUST, CMMC, FedRAMP or similar audits and / or certifications
• Ability to lead and motivate cross-functional teams while thriving in a fast-paced growing company
• Self-motivation and drive to go above and beyond
• Excellent communication, interpersonal and leadership skills, able to communicate security concepts to both technical and nontechnical audiences
• Experience with IT risk management standards, practices, methods, and frameworks including ISO 27001, COBIT and NIST CSF
• Drive the implementation of an effective digital health program to enhance the patient experience and improve overall outcomes
• Expertise in healthcare financial management, including IT budgeting, financial planning, and operations.

• Superior level of…