Chief Information Officer; CIO Chicago, IL

Prolaio believes that continuous learning and collaboration can make a significant difference in how heart care is administered. We are creating smarter ways to address heart disease and heart risks by integrating a connected platform enabled by smart data science to help patients access the care and attention that will inform better treatments and outcomes.

We envision a future where care teams and hospitals can be more effective, the healthcare system can be more efficient, and patients have a better care experience and more fulfilling lives.

This is precision cardiology, and we know it’s within reach.

Prolaio is seeking a strategic and execution‑oriented Chief Information Officer (CIO) to lead the company’s enterprise technology function. The CIO will be responsible for defining and executing Prolaio’s technology strategy, ensuring a secure, scalable, and compliant IT environment across all business operations.

This role oversees core enterprise IT functions while building the modern digital foundation required to support AI‑driven analytics, decentralized clinical trials, real‑world data integration, and global manufacturing operations. The CIO will play a critical role in enabling Prolaio’s growth through robust systems architecture, data infrastructure, and operational excellence.

In addition, the CIO serves as Prolaio’s executive owner of information security, risk management, and cybersecurity governance. This includes designing and leading a comprehensive security program capable of meeting CISO‑level expectations as the organization scales in a highly regulated healthcare environment.

The CIO will partner closely with the Prolaio Leadership Team and Kardigan leadership to ensure the company has the technology platforms, data pipelines, and cybersecurity posture necessary to operate safely, efficiently, and in full regulatory compliance.

• Enterprise IT Strategy & Governance
  • Develop and execute the enterprise IT roadmap aligned with Prolaio and Kardigan business goals.
  • Establish policies for access control, data governance, business continuity, and IT risk management.
• Technology Operations & Service Delivery
  • Oversee delivery of mission‑critical IT services including helpdesk, end‑user computing, HRIS, ERP/Finance systems, and communication platforms.
  • Ensure reliability and uptime targets for clinical operations and internal systems.
• Cybersecurity & Compliance Oversight
  • Ensure alignment with HIPAA, 21 CFR Part 11, GxP, and emerging regulatory requirements.
  • Maintain robust incident response, vulnerability management, and identity management programs.
• Lead procurement, contract negotiation, and performance management for cloud, software, and hardware vendors.
• Manage relationships with Kardigan’s IT teams to ensure alignment of shared systems and policies.
• Own third‑party risk management (TPRM), including vendor security assessments, ongoing monitoring, and remediation tracking.
• Ensure security controls extend to device manufacturers, cloud providers, CRO partners, and data processors.
• Cybersecurity Strategy, Risk & Governance
  • Own Prolaio’s enterprise cybersecurity strategy, risk posture, and security roadmap.
  • Establish and maintain an enterprise risk management framework covering IT, product, clinical, and research environments.
  • Define risk tolerance thresholds and elevate material risks to executive leadership and the Board as appropriate.
• Build and lead a high‑performing IT organization with clear roles across security, service delivery, cloud operations, and enterprise architecture.

• AI & Data Infrastructure Enablement
  • Design and manage the infrastructure required to support AI/ML workloads, including scalable cloud environments and high‑performance compute resources (HPC/GPU).
  • Support secure data movement between sensors, patient devices, trial sites, and internal systems.
• Edge & Distributed Computing for Clinical Operations
  • Implement edge computing capabilities for decentralized clinical trials, enabling low‑latency, secure data processing at the device level before synchronization to central systems.
• Ze…