Job description
We’re seeking a VP of Product Security to lead our security strategy across identity and access management, data security, and application security. In this high-impact role, you’ll partner directly with engineering and product leadership to embed security into the foundation of everything we build.
You will define and drive the overarching security roadmap, guiding teams to design, build, and deploy secure products at scale. Your leadership will ensure our security posture evolves with our technology—proactively identifying risks, enabling innovation, and earning customer trust.
If you’re a strategic thinker with deep technical expertise and a track record of building world-class security programs, we’d love to connect.
Primary Duties:
- Oversee and enhance identity and access management strategies and practices.
- Collaborate with engineering and product teams to integrate security into the product lifecycle.
- Develop and maintain product security strategy, aligning it with the overall business goal and security vision.
- Communicating security risks, findings and recommendations to executive leadership and other key stakeholders.
- Identifying, assessing and mitigating security risks throughout the product lifecycle, including threat modeling and vulnerability analysis.
Minimum Qualifications:
- Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or a related technical field; Master’s degree or relevant certifications (e.g., CISSP, CISM, CSSLP) preferred.
- 15+ years of progressive experience in security architecture and operations, including 5+ years in executive or senior leadership roles, preferably within SaaS or technology organizations.
- Demonstrated expertise in identity and access management (IAM), application security (AppSec), and data protection principles, frameworks, and solutions.
- Proven experience embedding security throughout the software development lifecycle (SDLC), with strong knowledge of DevSecOps, secure coding, and CI/CD integration.
- Familiarity with modern security technologies and architectures including zero trust, secrets management, threat modeling, SAST/DAST/IAST tools, and API security.
- Strong understanding of data governance, encryption practices, and privacy regulations (e.g., HIPAA, GDPR, CCPA).
Preferred Knowledge, Skills and/or Abilities:
- Prior leadership in scaling security programs for complex, distributed cloud environments (e.g., AWS, GCP, Azure).
- Experience managing incident response and vulnerability disclosure programs.
- Adept at fostering a culture of security awareness and shared responsibility within product and engineering teams.
- Effective at leading through influence, mentoring diverse security teams, and developing high-performing talent.
Who We Are:
Aledade, a public benefit corporation, exists to empower the most transformational part of our health care landscape - independent primary care. We were founded in 2014, and since then, we’ve become the largest network of independent primary care in the country - helping practices, health centers and clinics deliver better care to their patients and thrive in value-based care. Additionally, by creating value-based contracts across a wide variety of health plans, we aim to flip the script on the traditional fee-for-service model. Our work strengthens continuity of care, aligns incentives and ensures primary care physicians are paid for what they do best - keeping patients healthy. If you want to help create a health care system that is good for patients, good for practices and good for society - and if you’re eager to join a collaborative, inclusive and remote-first culture - you’ve come to the right place.
What Does This Mean for You?
At Aledade, you will be part of a creative culture that is driven by a passion for tackling complex issues with respect, open-mindedness and a desire to learn. You will collaborate with team members who bring a wide range of experiences, interests, backgrounds, beliefs and achievements to their work - and who are all united by a shared passion for public health and a commitment to the Aledade mission.
In addition to time off to support work-life balance and enjoyment, we offer the following comprehensive benefits package designed for the overall well-being of our team members:
Flexible work schedules and the ability to work remotely are available for many roles
Health, dental and vision insurance paid up to 80% for employees, dependents and domestic partners
Robust time-off plan (21 days of PTO in your first year)
Two paid volunteer days and 11 paid holidays
12 weeks paid parental leave for all new parents
Six weeks paid sabbatical after six years of service
Educational Assistant Program and Clinical Employee Reimbursement Program
401(k) with up to 4% match
Stock options
And much more!
At Aledade, we don’t just accept differences, we celebrate them! We strive to attract, develop and retain highly qualified individuals representing the diverse communities where we live and work. Aledade is committed to creating a diverse environment and is proud to be an equal opportunity employer. Employment policies and decisions at Aledade are based on merit, qualifications, performance and business needs. All qualified candidates will receive consideration for employment without regard to age, race, color, national origin, gender (including pregnancy, childbirth or medical conditions related to pregnancy or childbirth), gender identity or expression, religion, physical or mental disability, medical condition, legally protected genetic information, marital status, veteran status, or sexual orientation.
Privacy Policy: By applying for this job, you agree to Aledade’s Applicant Privacy Policy available at https://www.aledade.com/privacy-policy-applicants
