Senior Director, Security & Compliance

🕒 September 10

🇺🇸 United States – Remote

💵 $190k - $230k / year

⏰ Full Time

🟠 Senior

🚔 Compliance

👻 Ghost score 20%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Prompt Therapy Solutions Inc

WebsiteLinkedInAll Job Openings

11 - 50 employees

🏥 Healthcare

💼 Consulting

📦 Logistics

Healthcare • Consulting • Logistics

Prompt Therapy Solutions Inc. is a company that provides therapy-focused software solutions designed to enhance the efficiency and profitability of clinics. They offer a range of features including AI-powered scheduling, patient management, billing, and reporting tools. Their platform caters to various practice sizes, from startup clinics to large enterprises, aiming to optimize clinic operations and improve patient satisfaction. The company's AI solutions help streamline workflows for roles such as front desk staff, therapists, billers, and clinic owners. Through advanced analytics and automated processes, Prompt Therapy Solutions seeks to modernize practice management and drive growth for therapy providers.

📋 Description

• Serve as the company’s Compliance Officer and designated HIPAA Security Officer • Lead the company’s compliance and information security programs • Own HIPAA/HITECH compliance, including the Security Risk Analysis, risk-management plan, and ongoing oversight of required safeguards • Lead SOC 2 Type II and other compliance certifications, attestations, and assurance programs • Manage audit readiness, auditor relationships, remediation, and evidence sufficiency • Own the compliance and information-security policy framework, including policy development, review, approval, exceptions, and ongoing governance • Establish control ownership and ensure deficiencies, risks, and remediation plans are identified, tracked, and escalated • Partner with Engineering, DevOps, architecture, and IT leaders to evaluate security approaches and technical controls • Own the security incident-response framework and partner on incident assessment, response, and remediation • Lead security and compliance aspects of third-party risk management, customer diligence, audits, RFPs/RFIs, and security escalations • Establish governance for emerging technologies and sensitive data • Continuously improve the compliance and security operating model

🎯 Requirements

• 8+ years of experience in compliance, information security, risk management, or related disciplines, including meaningful leadership responsibility • Deep practical knowledge of HIPAA/HITECH and healthcare compliance requirements, ideally within a covered entity or business associate environment • Demonstrated experience leading SOC 2 Type II or comparable certification and assurance programs • Experience building or materially improving compliance governance, control environments, policy frameworks, audit readiness, and cross-functional accountability • Strong working knowledge of cloud security, application security, IAM, vulnerability management, endpoint security, secure SDLC practices, and modern SaaS architecture • Ability to engage credibly with technical leaders, evaluate proposed approaches, identify material risk, and translate technical issues into business, compliance, and customer impact • Strong executive judgment and communication skills, with the ability to work effectively across Legal, Engineering, Product, IT, People, Finance, auditors, customers, and executive leadership • Demonstrated ability to drive accountability across functions without relying solely on direct reporting relationships • Relevant certifications such as CISSP, CISM, CRISC, CISA, CHC, or similar are preferred but not required where equivalent experience is demonstrated • Legally authorized to work in the US • Located in the US

🏖️ Benefits

• Potential equity compensation for outstanding performance • Flexible PTO • Company-wide sponsored lunches • Company paid disability and life insurance benefits • Company paid family and medical leave • Medical, dental, and vision insurance benefits • Discounted pet insurance • FSA/DCA and commuter benefits • 401k • Credits for online fitness classes/gym memberships • Recovery suite at HQ — includes a cold plunge, sauna, and shower • Remote/hybrid environment