Open to opportunities

Saqib Khan

@saqibkhan1

Chief Information Security Officer and IT security director building audit-ready healthcare security programs without slowing the business.

United States

Message

What I'm looking for

I’m looking to lead security transformations in healthcare or regulated tech—building HITRUST/SOC 2-ready programs, strengthening AWS/cloud and IAM controls, and driving incident response with clear executive communication and measurable security outcomes.

I’m a hands-on security leader who builds secure, audit-ready healthcare technology environments without slowing the business down. Most recently, I led a security transformation for a $107M healthcare AI platform serving 200+ hospitals and 20M+ patient records, achieving HITRUST r2 domain approval on first submission with zero findings and supporting SOC 2 compliance.

I specialize in AWS/cloud security, application security, incident response, and DevSecOps-adjacent program build-out—plus corporate IT controls, vendor management, and customer-facing security trust conversations. My work consistently turns compliance requirements into practical, measurable, and sustainable security operations that leadership and engineering can execute.

Across my experience, I’ve acted as CISO leadership and also created security programs from the ground up through HITRUST r2 certification and SOC 2 readiness, including governance, policies, controls, evidence processes, audit readiness, executive reporting, and risk management. Earlier, I led security design and implementation for mission-critical cloud SaaS healthcare infrastructure, establishing ISO 27001 and HIPAA capabilities and rolling out 24x365 infrastructure security monitoring.

Experience

Work history, roles, and key accomplishments

Current

Security Consulting Principal

Current

AlgoScience, LLC

Dec 2015 - Present (10 years 6 months)

Built a security consulting practice focused on HITRUST and SOC 2 program development, fractional CISO support, and turnkey compliance for growth-stage companies in regulated environments. Advised executives on cyber risk, audit readiness, customer trust, and practical security program build-out.

HITRUST SOC Fractional CISO Risk Management

Acting Chief Information Security Officer

Persivia Inc.

Jun 2023 - Feb 2026 (2 years 8 months)

Led security transformation for a $107M healthcare AI platform serving 200+ hospital systems and 20M+ patient records. Built HITRUST r2 and SOC 2 programs, achieving 19/19 HITRUST domains on first submission with zero findings and reducing certification timelines by roughly 2–3x.

HITRUST SOC AWS Security Identity and Access Governance Vulnerability Management Incident Response

VP Global Quality, Compliance & InfoSec

Alere Corp. (now Abbott)

Jul 2013 - Jul 2014 (1 year)

Oversaw global information security, quality, and compliance initiatives across 130 legal entities, 227 locations, and 14,000+ personnel. Aligned security and compliance priorities with business operations, governance, privacy requirements, and executive decision-making.

Information Security Governance Compliance Program Management Risk Alignment Stakeholder Management Executive Reporting Quality Management Control Implementation

Security and Cloud Architect

Alere, Analytics Division (now Abbott)

Jan 2011 - Jul 2013 (2 years 6 months)

Led security design, implementation, and compliance for mission-critical cloud SaaS healthcare infrastructure. Established ISO 27001 and HIPAA capabilities and architected AWS production security and high-availability web service protection across multiple OS, VMware, and Cisco environments.

ISO 27001 HIPAA AWS Security Application Security Infrastructure Security High Availability

VP & Head of InfoSec

Netsol Technologies Ltd

Jan 2006 - Jan 2007 (1 year)

Created and managed the company’s information security services division with full P&L responsibility. Delivered end-to-end ISO 27001 consulting from kickoff through certification and built strategic security alliances in the region.

ISO 27001 Information Security P&L management Security Consulting Strategic Partnerships