Head of Information Security at AIOS Medical

Job Title

Head of Information Security

Not Disclosed

AIOS Medical is a $350M ARR, YC-backed healthcare company building the world’s first full-stack AI doctor. Currently serving 150k+ patients monthly through its UK pharmacy brand, Bolt Pharmacy, AIOS Medical is the world’s fastest-growing AI healthcare provider and is already profitable while scaling globally.

You will build a world-class security foundation from the ground up for a 10x growth company. You’ll own the entire cybersecurity strategy, from IAM and infrastructure security to incident response and regulatory compliance across the US, UK, and Europe, ensuring patient trust and operational resilience without compromising development speed.

Remote

• Join the world’s fastest-growing AI doctor company, scaling from $10M to $350M ARR in just 12 months with a clear roadmap toward becoming a trillion-dollar healthcare provider.
• True builder opportunity to establish the entire Information Security function and operating model from scratch for a profitable, founder-led, and YC-backed market leader.
• High-impact leadership role reporting to the Head of Business Operations, working directly with the VP of Engineering to secure sensitive healthcare data at massive scale.

• Own and execute the group-wide cybersecurity strategy, encompassing identity and access management, endpoint security, and cloud infrastructure across multiple international entities and pharmacies.
• Lead incident response, disaster recovery, and business continuity planning to ensure the resilience of critical healthcare systems serving hundreds of thousands of active patients.
• Translate complex regulatory requirements into practical controls, driving readiness for HIPAA, GDPR, SOC 2, and ISO 27001 while maintaining high-speed product development and deployment.

• 5+ years of experience leading information security or security engineering in a fast-growing organization, with a proven track record of building programs and owning security outcomes.
• Technical depth across cloud infrastructure, application security, and IAM, with the ability to manage complex security incidents and lead remediation efforts with limited structure.
• Experience protecting highly sensitive data in regulated environments like digital health, fintech, or insurance, ideally with experience managing security across US, UK, and European jurisdictions.