Senior Manager, Security & Compliance

Job Summary

Leading the next phase of the security program, the full-time Senior Manager, Security & Compliance will manage HITRUST certification, oversee SOC 2 Type II audits, and build a robust security framework while working remotely.

Key responsibilities

• Run HITRUST certification from kickoff through completion, including gap assessment and control mapping
• Own the end-to-end SOC 2 Type II process, including evidence collection and auditor relationship management
• Complete security questionnaires and represent the company with client and partner security teams

Required qualifications

• 7+ years in healthcare information security, governance/risk/compliance (GRC), or IT audit
• Experience with security and compliance frameworks such as SOC 2, HIPAA, and HITRUST
• Hands-on experience completing security questionnaires and engaging with enterprise security teams
• Working knowledge of HIPAA Security and Privacy Rules and handling patient health data (PHI)
• Technical depth in cloud infrastructure (GCP preferred) and modern data stacks