Manager – Security and Compliance

🕒 Outubro 5

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $130.000 - $150.000 / ano

⏰ Tempo Integral

🟠 Sênior

🔴 Especialista

👮‍♂️ Cibersegurança / Engenheiro de Segurança

🦅 Patrocina Visto H1B

Esta empresa já patrocinou vistos H1B no passado.

👻 Score fantasma 2%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Intus Care

SiteLinkedInTodas as Vagas

11 - 50 funcionários

💼 Consultoria

📣 Marketing

📦 Logística

💰 $13.100.000 Venture Round em 2023-01

Consulting • Marketing • Logistics

A IntusCare é uma empresa de tecnologia que se especializa em soluções de gestão de cuidados para programas PACE (Programa de Cuidados Abrangentes para Idosos) e Medicare. A empresa oferece diversas ferramentas e serviços, incluindo serviços de cuidados integrados, ajuste de risco e análises de saúde populacional, destinados a aprimorar a entrega de cuidados baseados em valor. Com mais de 50 parcerias em 18 estados, a IntusCare oferece tecnologia inovadora para simplificar o cuidado complexo e melhorar os resultados de saúde ao abordar o risco clínico e facilitar o planejamento de cuidados proativos.

Descrição

• Own and continuously improve IntusCare's security and compliance programs across HIPAA, SOC 2, HITRUST, and applicable privacy requirements • Lead IntusCare's HITRUST certification end to end, including scoping, readiness assessment, evidence collection, assessor coordination, and corrective action plans • Lead internal and external audits, risk assessments, security reviews, penetration tests, evidence collection, and remediation efforts • Manage external security and compliance partners, direct their scope and priorities, and ensure findings translate into owned remediation • Maintain the security and compliance roadmap with clear owners and resolution plans for risks, vulnerabilities, audit findings, and control gaps • Partner with Engineering, Product, Platform, SRE, and IT to integrate security into architecture, infrastructure, product development, and the SDLC • Oversee access management, logging and monitoring, encryption, vulnerability management, data retention, and vendor risk controls • Lead security incident responses, including investigation, communication, post-incident reviews, and corrective actions • Maintain security policies, procedures, Business Associate Agreements, data handling requirements, and breach response plans • Serve as day-to-day lead for HIPAA Security Rule obligations and support HIPAA and HITRUST attestations • Support customer security reviews, due diligence, onboarding, and security/privacy requirements during contract negotiations • Establish security and compliance metrics and provide leadership visibility into risks, incidents, vulnerabilities, remediation progress, and audit readiness • Lead security awareness and compliance training and manage, develop, and mentor the security and compliance team • Build a proactive, measurable, audit-ready security and compliance function integrated into IntusCare's healthcare SaaS operations • Achieve HITRUST certification with findings remediated and run security incidents consistently through the unified incident process

🎯 Requisitos

• 7+ years of experience in information security, healthcare compliance, privacy, or risk management, preferably within healthcare SaaS or health technology • Strong knowledge of HIPAA, SOC 2, HITRUST, healthcare privacy requirements, and security control frameworks • Proven experience leading audits, risk assessments, compliance programs, and remediation activities, including directing external advisors and assessors • Proven experience leading at least one HITRUST certification (i1 or r2) end to end as the accountable owner, including scoping, evidence collection, assessor management, and corrective action plans • Practical understanding of cloud/SaaS security, identity and access management, vulnerability management, encryption, logging, data protection, and incident response • Experience partnering with Engineering and Product teams to incorporate security into technology and development processes • Experience with vendor risk management and third-party security assessments • Strong communication skills with the ability to translate security and regulatory requirements for technical and non-technical audiences • Experience working with healthcare technology, EMRs, clinical systems, or healthcare data environments • Preferred: experience with PACE, value-based care, Medicare/Medicaid, or regulated healthcare environments • Preferred: experience building or scaling security and compliance programs in a growing SaaS company • Preferred: experience securing cloud-native environments, including Azure and Kubernetes/AKS, DevSecOps, and security automation • Preferred: experience leading a small security/compliance team or cross-functional security initiatives • Preferred: relevant certifications such as CCSFP, CISSP, CISM, or HCISPP • Must be based in the United States • This position is not eligible for sponsorship

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo