Security & Compliance Manager
Core
Own the day-to-day operational backbone of a growing security and compliance program within a remote, AI-enabled healthcare environment, focusing on HIPAA compliance and building toward SOC 2 or HITRUST readiness.
Role type
Senior GRC Manager (Healthcare)
Builds
Scalable security processes, compliance frameworks, and risk management capabilities for a healthcare startup.
Domain
Healthcare / Cybersecurity & Compliance
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Security Risk Assessment, penetration testing coordination, vendor security reviews, HIPAA compliance, incident response, identity and access management, compliance automation, AI security guardrails
Preferred skills
SOC 2 or HITRUST certification experience, Drata or Vanta platform experience, MDM and endpoint security solutions, Google Workspace security controls, AI governance
Technologies
Drata, Vanta, MDM, Google Workspace, password managers
Responsibilities
Own daily security program operations including risk assessments, penetration testing, and remediation tracking; Draft and maintain security policies and procedures; Lead vendor security assessments and Business Associate Agreement reviews; Monitor MDM and BYOD compliance; Act as lead for incident and breach response; Support identity and access management improvements; Prepare security and compliance reporting for leadership; Evaluate and implement compliance-automation platforms; Establish and maintain AI security guardrails; Build repeatable security and compliance processes.
Seniority
Senior, hands-on IC