HIPAA Security Officer

Job Summary

Owning and operating the HIPAA Security Program, the full-time remote Information Security Officer will safeguard electronic protected health information (ePHI), manage security risk analysis, and ensure compliance with HIPAA regulations in a fast-paced healthcare environment.

Key Responsibilities

• Serve as the designated HIPAA Security Official and oversee the organization's security risk analysis and remediation efforts
• Develop and maintain HIPAA administrative safeguards, including security training and incident procedures
• Manage the security incident response process and collaborate with IT on technical safeguards for ePHI

Required Qualifications

• 6+ years of information security experience
• 2+ years of experience in healthcare or a regulated ePHI/PII environment
• Hands-on ownership of a HIPAA security program or equivalent regulated security program
• Strong working knowledge of the HIPAA Security Rule
• Familiarity with security/control frameworks such as NIST Cybersecurity Framework or HITRUST