We are seeking a highly organized, strategic, and discreet Chief of Staff to support Ceribell’s VP of Information Security. This pivotal role will drive alignment and execution across a broad security and compliance portfolio, spanning Governance, Risk & Compliance (GRC), FedRAMP, IT Operations, Business Systems, and Security Engineering, while managing the VP’s priorities, communications, and cross-functional coordination. The ideal candidate combines program-management rigor with strong judgment on security, risk, and compliance topics, and can operate as a trusted extension of the VP across the organization.

Strategic Support and Executive Partnership

• Partner with the VP of Information Security to shape and execute security strategy across GRC, Federal/FedRAMP, IT Ops, Business Systems, and Security Engineering.
• Advise on organizational design, resourcing, and prioritization across the VP's five teams, and represent priorities in their absence.

Cybersecurity and Compliance Oversight

• Drive cross-team execution of cybersecurity and compliance initiatives (FedRAMP High, HIPAA, SOC 2, SOX ITGC, NIST 800-53), including continuous monitoring, audit readiness, and POA&M tracking.
• Oversee continuous monitoring cadences and audit-readiness activities, including FedRAMP documentation strategy, POA&M tracking, and interdepartmental reporting between vendors, internal teams, and Security leadership.
• Support third-party risk management, driving open vendor risk items to closure and escalating blockers.

Communication and Coordination

• Serve as liaison between the VP and other executives, department leaders, and external stakeholders such as auditors and vendors.
• Partner with VP of Information Security to prepare Board and executive-level materials, briefings, and talking points on security posture, program status, and emerging risk topics.
• Ensure key messages, decisions, and action items are consistently and accurately communicated across the VP’s organization.
• Build and maintain reporting and dashboards (e.g., compliance status, TPRM trackers, tooling spend and utilization, headcount and hiring pipeline) that give the VP and executive stakeholders a clear, current view of the organization

Project & Operational Efficiency Management

• Drive complex, cross-functional initiatives, org design changes, tooling evaluations, process redesigns, from scoping through implementation.
• Improve the VP's office and organization's efficiency through better use of project tools (Jira, Notion) and streamlined processes.

Requirements / Qualifications

• 8+ years of experience in a strategic or executive support, chief of staff, or program management role, including at least 3-5 years supporting senior technology or security leaders.
• Demonstrated experience in cybersecurity, IT, or compliance program management (e.g., FedRAMP, SOC 2, HIPAA, SOX ITGC), with working familiarity with NIST frameworks (800-53, 800-30, 800-161).
• Exceptional organizational and multitasking abilities, with proven experience managing multiple concurrent initiatives and stakeholders under tight deadlines.
• Strong executive communication skills, with the ability to present complex security and compliance topics to both technical and non-technical audiences, including senior executives and the Board.
• High degree of professionalism, discretion, and integrity; demonstrated ability to handle sensitive and confidential information appropriately.
• Advanced problem-solving, strategic thinking, and decision-making abilities in complex, matrixed environments.
• U.S. citizenship required due to federal compliance (FedRAMP) obligations.
• Must meet identity verification requirements prior to start.

Preferred

• Bachelor’s degree in Business Administration, Technology Management, Computer Science, or a related field; advanced degree (MBA or similar) a plus.
• Industry-recognized certifications such as CISA, CISSP, or PMP.
• Experience with security, GRC, and project management tools such as Jira, Notion, Tenable, or Splunk.
• Familiarity with cloud architectures, especially AWS and GCP, and identity platforms such as Okta.