Compliance and Security Director
New
B
BluesightHealthcare information technology
United States - RemoteFull-TimeDirector
Salary$155,000 - $170,000 a year; includes eligibility for an annual discretionary bonus in addition to base salary.
Apply NowOpens the employer's application page
Job Details
- Required Skills
- AWSHIPAA
Requirements
- Experience developing, implementing, and monitoring internal practices for SOC 2, HIPAA, NIST, or ISO compliance standards.
- Familiarity with hospital security operations and the ability to represent the company’s security posture and operational maturity to customers.
- Working knowledge of cloud infrastructure and security; AWS is preferred.
- Knowledge of IAM, networks, encryption and key management, logging and monitoring, and the shared responsibility model.
- Ability to read architecture diagrams and challenge control claims.
- Working knowledge of AI governance, such as NIST AI RMF or vendor AI risk, and interest in AI regulation.
- Subject matter expertise in security best practices and the ability to recommend risk treatment and escalate items for acceptance.
- Strong familiarity with data, data protection, privacy, and compliance automation or GRC platforms such as Vanta or Drata.
- Ability to communicate complex and critical information to a broad audience.
Responsibilities
- Lead the SOC 2 compliance program and manage the annual audit and certification process.
- Own the risk register, annual risk assessment, third-party and vendor risk, business continuity and disaster recovery, and policy lifecycles.
- Complete customer security reviews, including complex security and IT questionnaires, technical questions, and compliance and security contract issues.
- Assess and document compliance controls across AWS cloud infrastructure, working with Engineering to validate configurations, access controls, logging, encryption, and shared responsibility boundaries.
- Partner with IT on endpoint protection, IAM, and access reviews, and own audit evidence for these areas.
- Set up and extend the compliance automation platform.
- Conduct internal audits, train employees, and advise on security and compliance.
- Shape compliance strategy at the intersection of healthcare data security and AI.
View Full Description & ApplyYou'll be redirected to the employer's site
