Head of Security

About Pivotal Health

Pivotal Health is the leading technology platform that helps healthcare providers get paid fairly in an increasingly complex reimbursement landscape.

Today, many providers face persistent underpayment from health insurance companies, despite delivering high-quality care. While processes like IDR (Independent Dispute Resolution) were designed to promote fairness, they’re often administrative-heavy, time-consuming, and difficult to navigate without the right tools.

Pivotal Health combines software, data, and service into a seamlessly integrated, AI-driven platform that simplifies these complex reimbursement workflows. We help providers efficiently dispute underpaid claims, reduce administrative burden, and recover the reimbursement they’re entitled to; without adding more work to already stretched teams.

Our full-service IDR solution is just the starting point. We’re building solutions that enable providers to operate with clarity, control, and confidence across the reimbursement journey.

We're hiring Pivotal's Head of Security, a senior leader who will own the company's security program from the ground up. This is a rare opportunity to define what security looks like at a fast-growing, AI-native healthcare technology company handling sensitive provider data and complex financial workflows.

This role sits at the intersection of strategy, engineering, compliance, and customer trust. You'll work closely with key stakeholders across the organization to embed security across the organization. Not just as a technical function, but as a core part of how Pivotal builds, operates, and earns the confidence of the providers and partners it serves.

You'll bring enough technical depth to engage credibly with our engineering teams, and enough breadth to set organizational strategy, navigate the regulatory landscape, and represent Pivotal's security posture to customers, auditors, and key stakeholders. If you're energized by building something meaningful from scratch and want your work to matter beyond a checklist, this is the role for you.

• Build and own Pivotal's security program
• Establish the strategy, policies, processes, and roadmap that define Pivotal's security posture. Identify the company's most critical assets, prioritize risk accordingly, and build a program that scales alongside a fast-growing platform and team.
• Partner with engineering to embed security into the platform
• Work closely with engineering and infrastructure teams to ensure security is built into how we design, develop, and deploy — from cloud architecture and CI/CD pipelines to data access controls and third‑party integrations. You'll advocate for secure‑by‑design practices without slowing the team down.
• Lead compliance and regulatory readiness
• Own Pivotal's approach to relevant compliance frameworks, including SOC 2 and HIPAA. Translate regulatory requirements into actionable engineering and operational controls, lead audit preparation, and serve as the primary point of contact during security reviews.
• Stay ahead of the threat landscape
• Keep a close eye on the evolving security environment — emerging threats, new attack vectors, regulatory changes, and industry best practices. Bring that awareness into how Pivotal prioritizes and evolves its defenses over time.
• Interface with customers and external stakeholders
• Represent Pivotal's security program directly to customers, partners, and prospects. Answer security questionnaires, lead trust reviews, and give customers confidence that their data — and their providers' data — is in safe hands.
• Drive security awareness across the organization
• Champion a security‑conscious culture company wide. Work with teams outside of engineering — including finance, operations, and people — to ensure security practices extend beyond the codebase and into how the whole organization operates.
• Develop guidelines for emerging technologies
• As an AI‑native company, Pivotal is actively building with and around LLMs and AI tooling. Help define the guardrails for responsible, secure use of these technologies — both in our product and in our internal workflows.

• 8+ years of…