VP of Product Security, Remote

Position Overview

• Location Type: [Not specified]
• Job Type: Full Time
• Salary: [Not specified]

Aledade is seeking a VP of Product Security to lead its security strategy across identity and access management, data security, and application security. This high-impact role involves partnering directly with engineering and product leadership to embed security into the foundation of all products. The VP will define and drive the overarching security roadmap, guiding teams to design, build, and deploy secure products at scale. The role ensures the company's security posture evolves with its technology, proactively identifying risks, enabling innovation, and earning customer trust. This opportunity is ideal for strategic thinkers with deep technical expertise and a proven track record of building world-class security programs.

Primary Duties

• Oversee and enhance identity and access management strategies and practices.
• Collaborate with engineering and product teams to integrate security into the product lifecycle.
• Develop and maintain product security strategy, aligning it with the overall business goal and security vision.
• Communicate security risks, findings, and recommendations to executive leadership and other key stakeholders.
• Identify, assess, and mitigate security risks throughout the product lifecycle, including threat modeling and vulnerability analysis.

Minimum Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or a related technical field.
• Master’s degree or relevant certifications (e.g., CISSP, CISM, CSSLP) preferred.
• 15+ years of progressive experience in security architecture and operations.
• 5+ years in executive or senior leadership roles, preferably within SaaS or technology organizations.
• Demonstrated expertise in identity and access management (IAM), application security (AppSec), and data protection principles, frameworks, and solutions.
• Proven experience embedding security throughout the software development lifecycle (SDLC), with strong knowledge of DevSecOps, secure coding, and CI/CD integration.
• Familiarity with modern security technologies and architectures including zero trust, secrets management, threat modeling, SAST/DAST/IAST tools, and API security.
• Strong understanding of data governance, encryption practices, and privacy regulations (e.g., HIPAA, GDPR, CCPA).

Preferred Knowledge, Skills and/or Abilities

• Prior leadership in scaling security programs for complex, distributed cloud environments (e.g., AWS, GCP, Azure).
• Experience managing incident response and vulnerability disclosure programs.
• Adept at fostering a culture of security awareness and shared responsibility within product and engineering teams.
• Effective at leading through influence, mentoring diverse security teams, and developing high-performing talent.

Company Information

Aledade is a public benefit corporation dedicated to empowering independent primary care. Founded in 2014, Aledade has become the largest network of independent primary care in the country, assisting practices, health centers, and clinics in delivering better patient care and thriving in value-based care arrangements. By creating value-based contracts across various health plans, Aledade aims to shift the traditional fee-for-service model, strengthening continuity of care, aligning incentives, and ensuring primary care physicians are compensated for keeping patients healthy. Aledade offers a collaborative, inclusive, and remote-first culture for those passionate about creating a better healthcare system for patients, practices, and society.

What This Means for You

At Aledade, you will be part of a creative culture driven by a passion for tackling complex issues with respect, open-mindedness, and a desire to learn. You will collaborate with team members who bring a wide range of experiences and interests.