Triplemoon Clinical

Triplemoon Clinical

Virtual Chief Information Security Officer (vCISO)

Remote (United States) · Exec

Sponsorship not specifiedDetected 20 days ago
CybersecurityIncident ResponseComplianceStakeholder ManagementHIPAALeadershipCommunication

About the role

  • Triplemoon is seeking a Virtual Chief Information Security Officer (vCISO) to oversee and continuously strengthen our information security, IT operations, and compliance posture.
  • This role combines strategic information security leadership with hands-on operational oversight.
  • Ensure ongoing compliance with HIPAA and healthcare security best practices.

Responsibilities

  • Triplemoon maintains a strong security and compliance posture.
  • Information Security & Compliance Own the strategy, design, implementation, and continuous improvement of Triplemoon's information security and compliance program.
  • Develop, maintain, and document security policies, procedures, and controls.
  • Support customer security questionnaires, audits, and compliance requests.
  • Partner with leadership to identify, assess, and mitigateinformation security risks.
  • Recommend and implement improvements to strengthen security, scalability, and user experience.
  • Monitor vendor compliance and support periodic risk assessments.

Requirements

  • Ability to operate independently while serving as a strategic advisor to company leadership.

Nice to have

  • Security controls are documented, monitored, and continuously improved.
  • Customer security reviews and audits are completed efficiently and confidently.
  • Triplemoon remains audit-ready and positioned for future compliance milestones, including SOC 2 readiness.
  • IT issues, including onboarding and offboarding, are handled securely and consistently.
  • Vendor Risk Management Conduct security reviews of third-party vendors and software platforms.
  • Maintain required security documentation, including BAAs, DPAs, SOC reports, and related compliance artifacts.
  • 7+ years of experience in information security, IT administration, compliance, or related roles.
  • Experience serving as a vCISO, security leader, or senior security consultant.

Skills

  • Experience preparing organizations for SOC 2 audits and other compliance frameworks.
  • Hands-on experience administering Google Workspace, identity management platforms, endpoint management tools, and SaaS environments.
  • Excellent documentation, communication, and stakeholder management skills.

Compensation

  • As we grow our collaborative care offering we are adding to our team.
  • The Opportunity Triplemoon is seeking a Virtual Chief Information Security Officer (vCISO) to oversee and continuously strengthen our information security, IT operations, and compliance posture.
  • This role combines strategic information security leadership with hands-on operational oversight.
  • The ideal candidate will serve as Triplemoon's trusted security advisor, ensuring our systems remain secure, compliant, and audit-ready while providing responsive support to our growing remote workforce.
  • Information Security & Compliance Own the strategy, design, implementation, and continuous improvement of Triplemoon's information security and compliance program.
  • Lead readiness efforts for future SOC 2 certification and other security frameworks as needed.

Benefits

  • Competitive, based on experience and scope About Triplemoon Triplemoon is a digital health platform transforming family wellness by addressing critical gaps in mental, behavioral, and nutritional health.
  • We partner with providers, employers and ultimately families to provide accessible, evidence-based mental health resources that improve patient outcomes, increase provider capacity, and boost clinic financials.
  • With growing demand for tailored, mental health resources amidst a shortage of providers (with wait times exceeding 4-6 weeks), Triplemoon is uniquely positioned to solve a critical gap in care for families and clinics.
  • Strong knowledge of HIPAA Security Rule requirements and healthcare security best practices.
  • Experience supporting early-stage startups or high-growth healthcare organizations.
  • As a fully remote healthcare organization, we rely on secure, scalable technology systems to support our employees, patients, and provider partners.

This listing is sourced directly from Triplemoon Clinical's careers page and normalized into a canonical job model.