Senior Director, Security & Compliance

📋 Description

• Serve as the company's Compliance Officer and designated HIPAA Security Officer, leading the
• Own HIPAA/HITECH compliance, including the Security Risk Analysis, risk-management plan, and
• Be accountable for SOC 2 Type II and other compliance certifications, attestations, and assurance
• Own the company's compliance and information-security policy framework, including policy
• Establish clear ownership for controls across the organization and ensure deficiencies, risks, and
• Partner with Engineering, DevOps, architecture, and IT leaders to evaluate security approaches and

🎯 Requirements

• 8+ years of experience in compliance, information security, risk management, or related
• Deep practical knowledge of HIPAA/HITECH and healthcare compliance requirements, ideally within a
• Demonstrated experience leading SOC 2 Type II or comparable certification and assurance programs.
• Experience building or materially improving compliance governance, control environments, policy
• Strong working knowledge of cloud security, application security, IAM, vulnerability management
• Ability to engage credibly with technical leaders, evaluate proposed approaches, identify material

🎁 Benefits

• Competitive salaries
• Remote/hybrid environment
• Potential equity compensation for outstanding performance
• Flexible PTO
• Company-wide sponsored lunches
• Company paid disability and life insurance benefits