IT Security & Compliance Lead

About the role

VIA HealthTech is building AI‑driven tools for psychotherapy documentation and needs a hands‑on leader to own its security and compliance program. You will work in a small, fast‑moving team, turning security policies into practical, automated solutions that keep highly sensitive health data safe.

Key responsibilities

• Own end‑to‑end internal IT security: device management, access control, 2FA, endpoint protection, onboarding/offboarding.
• Maintain and operate the internal IT infrastructure, ensuring it meets security best practices.
• Lead ISO27001 and C5 compliance, manage audits, evidence collection, risk treatment, and internal training.
• Improve cloud security across infrastructure, encryption, logging, monitoring, and operational processes.
• Partner with engineering to embed security into product development for web, desktop, mobile, backend, and AI components.
• Coordinate external security activities such as penetration tests, vendor assessments, and security reviews.
• Identify security gaps, prioritize remediation, and implement pragmatic improvements without slowing the team.

Required profile

• Strong hands‑on experience in IT, information, or cloud security.
• Proven track record securing cloud‑based software products and internal IT environments.
• Solid understanding of IAM, endpoint security, device management, encryption, logging, access control, and incident response.
• Direct experience with ISO27001 and/or C5 audits, preferably as audit owner.
• Ability to work closely with engineering teams on technical security topics.
• Operational ownership mindset and pragmatic judgment to raise security standards without hindering speed.

Required skills

• Identity and Access Management (IAM)
• Endpoint security and protection
• Device management
• Encryption and key management
• Logging and monitoring
• Access control policies
• Incident response processes
• ISO27001 compliance
• C5 compliance
• Cloud security (AWS/Azure/GCP)
• Two‑factor authentication (2FA)