Security & Compliance Manager

Job Summary

Owning security and compliance end-to-end, the full-time remote Security & Compliance Manager will build and manage a scalable program, automate compliance processes, and handle customer-facing security inquiries in a healthcare SaaS environment.

Key responsibilities

• Manage customer-facing security and compliance tasks, including answering security questionnaires and handling audits
• Oversee audits and certifications such as HITRUST and SOC 2, ensuring readiness and tracking remediation
• Administer compliance tooling and maintain policies, training, and incident response programs

Required qualifications

• Extensive experience in security compliance or GRC, particularly in healthcare SaaS or PHI-handling environments
• Proven ownership of SOC 2 and HITRUST processes
• Deep understanding of HIPAA regulations and compliance frameworks
• Hands-on experience with compliance automation platforms like Vanta
• Strong ability to engage in technical conversations with engineering teams