Manager of Security and Compliance

Job Summary

To lead the execution and maturity of security, privacy, and healthcare compliance programs, the full-time Manager of Security and Compliance will manage key compliance initiatives, oversee audits and risk assessments, and partner with various teams in a remote environment.

Key Responsibilities

• Own and improve security and compliance programs across HIPAA, SOC 2, HITRUST, and privacy requirements
• Lead HITRUST certification processes, including readiness assessments and evidence collection
• Manage internal and external audits, risk assessments, and security incident responses

Required Qualifications

• 7+ years of experience in information security, healthcare compliance, or risk management
• Strong knowledge of HIPAA, SOC 2, HITRUST, and security control frameworks
• Proven experience leading audits and compliance programs, including HITRUST certification
• Practical understanding of cloud/SaaS security and incident response
• Experience collaborating with Engineering and Product teams on security integration