Compliance and Security Director

📋 Description

• Own and drive the SOC2 compliance program, including annual audit and certification.
• Manage risk register, risk assessments, third-party/vendor risk, BCP/DR, and policy lifecycle.
• Direct customer security and IT conversations, questionnaires, and contract compliance issues.
• Assess and document compliance controls across AWS cloud infrastructure with Engineering.
• Partner with IT on endpoint protection, IAM, and access reviews.
• Establish and extend compliance automation platform.

🎯 Requirements

• Experience developing, implementing, and monitoring SOC2, HIPAA, NIST, or ISO compliance programs.
• Familiarity with hospital security operations and credible representation of security posture.
• Working knowledge of AWS cloud infrastructure and security: IAM, networking, encryption
• Working knowledge of AI governance (NIST AI RMF or vendor AI risk) and proactive interest in AI
• Clear communication of complex and critical information to a broad audience.
• Subject matter expertise in security best practices and risk treatment.

🎁 Benefits

• Competitive salary
• Unlimited vacation days
• Generous insurance coverage
• 401k program with company match
• Opportunities to solve problems of scale
• Strong voice in work direction