Chief of Staff, Information Security & IT Operations

Ceribell is a medical technology company focused on transforming the diagnosis and management of patients with serious neurological conditions. The Ceribell System is a novel, point-of-care electroencephalography (“EEG”) platform specifically designed to address the unmet needs of patients in the acute care setting, and is being used in hundreds of community hospitals, large academic facilities and major IDN's across the country. Our entire team is driven by a shared commitment to transforming the landscape of critical care through our rapid seizure detection technology, come join the movement!

We are seeking a highly organized, strategic, and discreet Chief of Staff to support Ceribell’s VP of Information Security. This pivotal role will drive alignment and execution across a broad security and compliance portfolio, spanning Governance, Risk & Compliance (GRC), FedRAMP, IT Operations, Business Systems, and Security Engineering, while managing the VP’s priorities, communications, and cross-functional coordination. The ideal candidate combines program-management rigor with strong judgment on security, risk, and compliance topics, and can operate as a trusted extension of the VP across the organization. 

• Partner with the VP of Information Security to shape and execute security strategy across GRC, Federal/FedRAMP, IT Ops, Business Systems, and Security Engineering.
• Advise on organizational design, resourcing, and prioritization across the VP's five teams, and represent priorities in their absence.

• Drive cross-team execution of cybersecurity and compliance initiatives (FedRAMP High, HIPAA, SOC 2, SOX ITGC, NIST 800-53), including continuous monitoring, audit readiness, and POA&M tracking.
• Oversee continuous monitoring cadences and audit-readiness activities, including FedRAMP documentation strategy, POA&M tracking, and interdepartmental reporting between vendors, internal teams, and Security leadership.
• Support third-party risk management, driving open vendor risk items to closure and escalating blockers.

• Serve as liaison between the VP and other executives, department leaders, and external stakeholders such as auditors and vendors.
• Partner with VP of Information Security to prepare Board and executive-level materials, briefings, and talking points on security posture, program status, and emerging risk topics.
• Ensure key messages, decisions, and action items are consistently and accurately communicated across the VP’s organization.
• Build and maintain reporting and dashboards (e.g., compliance status, TPRM trackers, tooling spend and utilization, headcount and hiring pipeline) that give the VP and executive stakeholders a clear, current view of the organization

• Drive complex, cross-functional initiatives, org design changes, tooling evaluations, process redesigns, from scoping through implementation.
• Improve the VP's office and organization's efficiency through better use of project tools (Jira, Notion) and streamlined processes.

• 8+ years of experience in a strategic or executive support, chief of staff, or program management role, including at least 3-5 years supporting senior technology or security leaders.
• Demonstrated experience in cybersecurity, IT, or compliance program management (e.g., FedRAMP, SOC 2, HIPAA, SOX ITGC), with working familiarity with NIST frameworks (800-53, 800-30, 800-161).
• Exceptional organizational and multitasking abilities, with proven experience managing multiple concurrent initiatives and stakeholders under tight deadlines.
• Strong executive communication skills, with the ability to present complex security and compliance topics to both technical and non-technical audiences, including senior executives and the Board.
• High degree of professionalism, discretion, and integrity; demonstrated ability to handle sensitive and confidential information appropriately.
• Advanced problem-solving, strategic thinking, and decision-making abilities in complex, matrixed environments.
• U.S. citizenship required due to federal compliance (FedRAMP) obligations.
• Must meet identity verification requirements prior to start. 

• Bachelor’s degree in Business Administration, Technology Management, Computer Science, or a related field; advanced degree (MBA or similar) a plus.
• Industry-recognized certifications such as CISA, CISSP, or PMP.
• Experience with security, GRC, and project management tools such as Jira, Notion, Tenable, or Splunk.
• Familiarity with cloud architectures, especially AWS and GCP, and identity platforms such as Okta.