Nick John Weir

Background

About Nick John Weir

I build security programs for healthcare startups to keep their data private, secure, and aligned with industry standards like HIPAA, HITRUST, NIST, and GDPR. More importantly, I create a culture that embraces security principles, embedding them into the organization's fabric. I take a risk-based approach to designing security protocols, focusing efforts on projects with the greatest impact and protection. The crux of building scalable programs rests on two key principles. First, design your security protocols to be robust enough to handle the task at hand while remaining lean enough to be resilient and flexible as you grow. Second, recognize that any security framework relies on the actions of every team member—ignored or circumvented controls don't add value, only resentment. The stability of your security program comes from a team invested in maintaining a secure environment for everyone's benefit. At Redox, I designed the security and compliance team from inception to encompassing over 850 controls supporting the highest level of HITRUST compliance and privacy laws including GDPR and CCPA/CPRA. I've also had the pleasure of advising over 30 CTOs and CIOs of early-stage health tech startups on building security programs that meet their needs and pass their audits.