Senior Manager, Security & Compliance

Leading the next phase of the security program, the full-time Senior Manager, Security & Compliance will manage HITRUST certification, oversee SOC 2 Type II audits, and build a robust security framework while working remotely. Key responsibilities Run HITRUST certification from kickoff through completion, including gap assessment and control mapping Own the end-to-end SOC 2 Type II process, including evidence collection and auditor relationship management Complete security questionnaires and represent the company with client and partner security teams Required qualifications 7+ years in healthcare information security, governance/risk/compliance (GRC), or IT audit Experience with security and compliance frameworks such as SOC 2, HIPAA, and HITRUST Hands-on experience completing security questionnaires and engaging with enterprise security teams Working knowledge of HIPAA Security and Privacy Rules and handling patient health data (PHI) Technical depth in cloud infrastructure (GCP preferred) and modern data stacks