About us

Forus is building an AI-powered network that connects doctors, pharmacies, payers, and biopharma to accelerate new science to patients.

Our platform automates the complexity between a doctor prescribing a medicine and a patient starting treatment, including insurance coverage, financial assistance, and supply chain navigation. We provide this support free to doctors and patients, helping them get life-changing medicine faster, cheaper, and easier. The resulting network enables biopharma companies to design better research, launch new drugs more effectively, and invest in harder-to-treat conditions.

Forus has exceptional product-market fit and is growing rapidly through organic adoption

Accelerating scale: We already support patients across more than 85% of ZIP codes and partner with 9 of top 15 largest biopharma companies in the world.

AI-native, durable model: Our business becomes stronger as AI improves, as every new doctor, patient, and partner makes the network more valuable.

Backing to build for the long term: We raised $300M+ from leading investors to build an exceptional team and unlock the full scale of the opportunity.

Our number one priority is scaling to market demand. We are looking for individuals who are high horsepower, high throughput, and hyper resourceful to help us increase capacity and grow. We move fast and need to move faster.

If we succeed, science will be the only limit to medicine.

All full-time roles are in person in New York.

About the role

As a Security Operations Lead at Forus, you will own the programs that enable customers to trust us with their most sensitive data. We handle protected health information to automate critical workflows for our providers, payers, and life sciences partners, so our security and compliance posture directly affects both what we can build and how quickly we can bring it to market.

You will own our SOC 2, HIPAA, and HITRUST compliance programs end-to-end, building a customer trust function that turns enterprise security diligence into a repeatable, high-quality motion. As Forus scales, you will create systems to maintain current evidence, controls, and risk visibility while partnering closely with Security Engineering, Legal, IT, and GTM to translate compliance requirements into actionable technical controls.

This is a demanding role, with a high level of autonomy and responsibility. You will be expected to "act like an owner" and commit yourself to Forus' success. If you are low-ego, hungry to learn, and excited about intense, impactful work that drives both company growth and accelerated career progression, we want to hear from you.

If you join, you will

Own our compliance programs end to end (SOC 2 Type II, HIPAA, and HITRUST) from readiness through audit and continuous monitoring

Build and run the customer trust function, including security questionnaires, RFPs, due diligence, and our trust center, so security accelerates enterprise decisions rather than blocking them

Own third-party and vendor security risk, including diligence, control assessments, and ongoing monitoring; partner with Legal on contractual and data-handling requirements

Build compliance automation that turns evidence collection, control monitoring, and audit preparation into a continuous, low-toil system

Define security policies, run security-awareness programs, and drive access reviews and audit readiness across the company

Partner with Security Engineering, Product Engineering, and Legal to translate framework and customer requirements into concrete controls, and coordinate external auditors and penetration-testing firms

Own the risk register and give leadership clear, decision-useful visibility into our security and compliance posture

We'll be most excited if you have

Typically 8+ years in security, compliance, or risk, including standing up a security and compliance program from scratch

Hands-on experience with SOC 2 and HIPAA; HITRUST experience is a strong plus, as is evidence that you have stood up a new framework or program from scratch