Security Engineer
Core
Own security and compliance across the company, leading HITRUST r2 and SOC 2 Type 2 programs and managing customer security reviews.
Role type
Security Engineer (Compliance & Governance)
Builds
HITRUST and SOC 2 compliance programs, security policies, and incident response plans
Domain
Healthcare / Health Tech / Cybersecurity
Required skills
HITRUST r2 program ownership, SOC 2 Type 2 audit management, security questionnaire response, secure design review, DLP operations, vendor risk assessment, policy writing, incident response planning
Preferred skills
Healthcare security experience, HIPAA compliance knowledge, GCP security expertise, AI governance experience, Python scripting
Technologies
HITRUST, SOC 2, GCP, DLP tools, Google Workspace
Responsibilities
Lead HITRUST r2 and SOC 2 Type 2 programs including evidence collection and remediation; Answer security questionnaires and audit requests from customers; Review security designs for new systems and audit cloud implementations; Operate DLP tooling and AI governance controls; Assess vendor and third-party risk; Write and maintain security policies and incident response plans
Seniority
Mid-Senior, hands-on IC
