Manager – Security and Compliance

🕒 vor 11 Tagen

🇺🇸 Vereinigte Staaten – Remote

💵 $130.000 - $150.000 / Jahr

⏰ Vollzeit

🟠 Senior

🔴 Experte

👮‍♂️ IT-Sicherheitsingenieur

🦅 H1B-Visum-Sponsor

Dieses Unternehmen hat in der Vergangenheit H1B-Visa gesponsert.

👻 Geisterscore 3%

Was es bedeutet: wie wahrscheinlich diese Stelle offen bleibt, ohne dass aktiv eingestellt wird.So liest du es: 60 % oder höher heißt, wir halten das für einen Geisterjob. Niedrigere Werte sind weniger bedenklich.Wie wir werten: Dauer offen, Neuveröffentlichungen, offene Stellen vs Teamgröße, wie schnell Stellen geschlossen werden, und ob ein Gehalt angegeben ist.Hinweis: eine Schätzung aus öffentlichen Daten, kein Urteil über das Unternehmen. Echte Stellen können hoch punkten, nutze es also als Hinweis, nicht als Fakt.

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mail-Benachrichtigung für neue Jobs einrichten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

Intus Care

WebsiteLinkedInAlle Stellen

11 - 50 Mitarbeiter

💼 Beratung

📣 Marketing

📦 Logistik

💰 €13.100.000 Venture Round im 2023-01

Consulting • Marketing • Logistics

IntusCare ist ein Technologieunternehmen, das sich auf Pflegemanagementlösungen für PACE (Programme der umfassenden Pflege für Ältere) und Medicare-Programme spezialisiert hat. Das Unternehmen bietet verschiedene Werkzeuge und Dienstleistungen an, darunter integrierte Pflegedienste, Risikoadjustierung und Bevölkerungsanalyse, mit dem Ziel, die ergebnisorientierte Versorgung zu verbessern. Mit über 50 Partnerschaften in 18 Bundesstaaten bietet IntusCare innovative Technologien, um komplexe Pflegeprozesse zu optimieren und die Gesundheitsergebnisse zu verbessern, indem klinische Risiken angegangen und eine proaktive Pflegeplanung erleichtert werden.

Beschreibung

• Own and continuously improve IntusCare's security and compliance programs across HIPAA, SOC 2, HITRUST, and applicable privacy requirements • Lead IntusCare's HITRUST certification end to end, including scoping, readiness assessment, evidence collection, assessor coordination, and corrective action plans • Lead internal and external audits, risk assessments, security reviews, penetration tests, evidence collection, and remediation efforts • Manage external security and compliance partners, direct their scope and priorities, and ensure findings translate into owned remediation • Maintain the security and compliance roadmap with clear owners and resolution plans for risks, vulnerabilities, audit findings, and control gaps • Partner with Engineering, Product, Platform, SRE, and IT to integrate security into architecture, infrastructure, product development, and the SDLC • Oversee access management, logging and monitoring, encryption, vulnerability management, data retention, and vendor risk controls • Lead security incident responses, including investigation, communication, post-incident reviews, and corrective actions • Maintain security policies, procedures, Business Associate Agreements, data handling requirements, and breach response plans • Serve as day-to-day lead for HIPAA Security Rule obligations and support HIPAA and HITRUST attestations • Support customer security reviews, due diligence, onboarding, and security/privacy requirements during contract negotiations • Establish security and compliance metrics and provide leadership visibility into risks, incidents, vulnerabilities, remediation progress, and audit readiness • Lead security awareness and compliance training and manage, develop, and mentor the security and compliance team • Build a proactive, measurable, audit-ready security and compliance function integrated into IntusCare's healthcare SaaS operations • Achieve HITRUST certification with findings remediated and run security incidents consistently through the unified incident process

🎯 Anforderungen

• 7+ years of experience in information security, healthcare compliance, privacy, or risk management, preferably within healthcare SaaS or health technology • Strong knowledge of HIPAA, SOC 2, HITRUST, healthcare privacy requirements, and security control frameworks • Proven experience leading audits, risk assessments, compliance programs, and remediation activities, including directing external advisors and assessors • Proven experience leading at least one HITRUST certification (i1 or r2) end to end as the accountable owner, including scoping, evidence collection, assessor management, and corrective action plans • Practical understanding of cloud/SaaS security, identity and access management, vulnerability management, encryption, logging, data protection, and incident response • Experience partnering with Engineering and Product teams to incorporate security into technology and development processes • Experience with vendor risk management and third-party security assessments • Strong communication skills with the ability to translate security and regulatory requirements for technical and non-technical audiences • Experience working with healthcare technology, EMRs, clinical systems, or healthcare data environments • Preferred: experience with PACE, value-based care, Medicare/Medicaid, or regulated healthcare environments • Preferred: experience building or scaling security and compliance programs in a growing SaaS company • Preferred: experience securing cloud-native environments, including Azure and Kubernetes/AKS, DevSecOps, and security automation • Preferred: experience leading a small security/compliance team or cross-functional security initiatives • Preferred: relevant certifications such as CCSFP, CISSP, CISM, or HCISPP • Must be based in the United States • This position is not eligible for sponsorship