Security & Compliance Manager

Job Summary

To support a growing AI-enabled mental health startup, the remote Security & Compliance Manager will manage the operational backbone of the security and compliance program, overseeing risk assessments, vendor audits, and compliance documentation while working closely with the Chief Product Officer and contractor CISO.

Key Responsibilities

• Own day-to-day management of the security program, including security risk assessments and penetration test coordination
• Draft and maintain policies and procedures for compliance with evolving regulatory requirements
• Lead vendor security assessments and manage Business Associate Agreement audits across the vendor ecosystem

Required Qualifications

• 3-6+ years of experience in security compliance, IT security, or governance, risk, and compliance (GRC) roles
• Direct experience with HIPAA Security Rule requirements and vendor risk reviews in regulated industries
• Proven ability to manage a security calendar and track remediation items across multiple stakeholders
• Experience collaborating with a fractional or contractor CISO and translating technical risks into clear reports
• Strong documentation and project management skills, with the ability to work independently in a fast-paced environment