Director of Security Compliance

Job Summary

Leading the security governance and compliance strategy, the full-time remote Director of Security Compliance will define security standards, manage SOC 2 Type II and HITRUST certification lifecycles, and oversee day-to-day security compliance operations while partnering with engineering leadership.

Key responsibilities

• Define and own the enterprise-wide security strategy and policy framework in collaboration with the engineering team
• Lead the full lifecycle for SOC 2 Type II and HITRUST certifications, managing external auditors and internal evidence collection
• Oversee day-to-day security compliance operations, including security policies, access control governance, and security awareness training

Required qualifications

• 8+ years of experience in Information Security, with at least 3 years in a leadership or GRC-focused role, preferably in healthcare
• Deep knowledge of HIPAA and HITECH, along with working knowledge of state privacy and security laws (CCPA/CPRA)
• Proven experience leading successful SOC 2 and HITRUST certification cycles from readiness through audit
• Technical fluency in cloud environments and modern security tooling
• Preferred certifications: CISSP, CISM, or CISA