Manager of Security and Compliance

📋 Description

• Own and continuously mature security, privacy, and compliance programs covering HIPAA, SOC 2
• Lead HITRUST certification end to end, including scoping, readiness assessments, evidence
• Manage internal and external audits, risk assessments, penetration tests, security reviews
• Build a path toward continuous, system-generated compliance rather than relying primarily on
• Manage external security and compliance partners, including advisors, assessors, and
• Maintain the security and compliance roadmap, ensuring vulnerabilities, risks, audit findings, and

🎯 Requirements

• 7+ years of experience in information security, healthcare compliance, privacy, risk management, or
• Strong working knowledge of HIPAA, SOC 2, HITRUST, healthcare privacy requirements, and security
• Demonstrated experience leading audits, risk assessments, compliance programs, remediation
• Proven experience serving as the accountable owner for at least one HITRUST certification, either
• Practical knowledge of cloud and SaaS security, identity and access management, vulnerability
• Experience partnering with Engineering and Product teams to integrate security into technology

🎁 Benefits

• Base salary range of $130,000–$150,000, with final compensation determined by experience, skills
• Fully remote position within the United States.
• Opportunity to lead and mature security, privacy, and compliance programs within a growing
• High-impact role with significant cross-functional exposure across Engineering, Product, SRE, IT
• Opportunity to lead HITRUST certification and build scalable, proactive security and compliance
• Meaningful leadership responsibility, including team development and mentorship.