Jeff Moss

About Jeff Moss

CIO/CISO with more than 11 years across security, engineering, and IT, including over 6 years in leadership. Two-time CISO who has built and scaled enterprise security and IT programs from the ground up at $1B+ AI/ML startups in highly regulated, multinational environments. Currently leading security for AI, data, cloud, product, and privacy platforms at a global healthcare SaaS company. Recognized for aligning security with business outcomes, enabling growth and M&A, and building trust with boards, regulators, and enterprise customers.My career spans the full spectrum of security leadership: creating zero-to-one programs, embedding security into AI/ML systems across healthcare, identity, defense, and biometrics, and driving IT modernization to support business scale. I bring deep experience navigating complex regulatory landscapes including HIPAA, HITRUST, SOC 2, PCI DSS, FedRAMP, NIST, and GDPR, while building resilience and risk management strategies that strengthen enterprise trust.In addition to operating roles, I support venture diligence, advise startups on secure growth, and have contributed to global initiatives such as the World Economic Forum’s Partnership Against Cybercrime. At the core of my work is a consistent goal: enabling organizations to innovate, operate, and expand securely, with trust and resilience as core foundations.

Experience

1. Senior Director, Product Security

   Ro

   Jul 2024 — Present

   Brought in to lead a product and cloud security transformation at Ro, a vertically integrated telehealth company spanning patient, provider, and pharmacy services. Direct security programs across product, cloud, data, AI, privacy, and offensive security—embedding security into the platform’s core architecture while ensuring compliance in a complex, regulated healthcare environment. Drive cross-functional strategy and delivery in collaboration with engineering, IT, legal, compliance, and clinical teams.Highlights- Security Transformation: Led a maturity uplift across product, cloud, and data security domains, advancing benchmarks significantly within the first year- Platform-Embedded Security: Acted as product owner for key security features, including audit logging, analytics, and fraud prevention capabilities- Data Risk Reduction: Built and executed a data protection program that reduced sensitive data exposure at scale- Cloud Visibility & Compliance: Achieved full visibility across multi-cloud environments and drove measurable gains in alignment with HIPAA, HITRUST, and SOC 2- Engineering Alignment: Introduced a secure development lifecycle model that improved security posture while supporting development velocity.

Education

• Central Oregon Community College

  N/A, General Studies

  2000 — 2001

• Oregon State University

  Bachelor of Science (B.S.), Computer Science

  2014 — 2016

• The University of Texas at Austin

  N/A, Aeronautical and Astronautical Engineering

  2001 — 2003

• Oregon State University

  BS, Civil Engineering

  2003 — 2006

• Portland State University - School of Business

  Masters, Business Administration with concentration in international business

  2008 — 2010

Skills

• Docker
• Gradle
• Git
• Authentication
• Mysql
• Chef
• Leadership
• Oauth
• Apis
• Devops
• IT Strategy
• Cyber-Security
• Javascript
• Html5
• Agile Methodologies
• Strategic Planning
• Vagrant
• C++
• Swift
• Requirements Gathering
• Openid
• Groovy
• Css
• Python
• Team Leadership
• Leadership Development
• C
• Security Assertion Markup Language (Saml)
• Java
• Ruby
• Software Engineering
• Testing