Manager – Security and Compliance

🕒 October 5

🇺🇸 United States – Remote

💵 $130k - $150k / year

⏰ Full Time

🟠 Senior

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 3%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Intus Care

WebsiteLinkedInAll Job Openings

11 - 50 employees

💼 Consulting

📣 Marketing

📦 Logistics

💰 $13.1M Venture Round on 2023-01

Consulting • Marketing • Logistics

Intus Care is a healthcare analytics platform that synthesizes healthcare data to identify risks, visualize trends, and optimize care. The company empowers long-term care providers to deliver more effective care to older adults by predicting high-risk patients, reducing expenditures through early risk detection, and improving organizational performance using data-driven insights. Intus Care is particularly beneficial for PACE (Programs of All-Inclusive Care for the Elderly) organizations, providing tools that enable care providers and executives to make informed decisions and proactively manage patient care based on real-time analytics.

📋 Description

• Own and continuously improve IntusCare's security and compliance programs across HIPAA, SOC 2, HITRUST, and applicable privacy requirements • Lead IntusCare's HITRUST certification end to end, including scoping, readiness assessment, evidence collection, assessor coordination, and corrective action plans • Lead internal and external audits, risk assessments, security reviews, penetration tests, evidence collection, and remediation efforts • Manage external security and compliance partners, direct their scope and priorities, and ensure findings translate into owned remediation • Maintain the security and compliance roadmap with clear owners and resolution plans for risks, vulnerabilities, audit findings, and control gaps • Partner with Engineering, Product, Platform, SRE, and IT to integrate security into architecture, infrastructure, product development, and the SDLC • Oversee access management, logging and monitoring, encryption, vulnerability management, data retention, and vendor risk controls • Lead security incident responses, including investigation, communication, post-incident reviews, and corrective actions • Maintain security policies, procedures, Business Associate Agreements, data handling requirements, and breach response plans • Serve as day-to-day lead for HIPAA Security Rule obligations and support HIPAA and HITRUST attestations • Support customer security reviews, due diligence, onboarding, and security/privacy requirements during contract negotiations • Establish security and compliance metrics and provide leadership visibility into risks, incidents, vulnerabilities, remediation progress, and audit readiness • Lead security awareness and compliance training and manage, develop, and mentor the security and compliance team • Build a proactive, measurable, audit-ready security and compliance function integrated into IntusCare's healthcare SaaS operations • Achieve HITRUST certification with findings remediated and run security incidents consistently through the unified incident process

🎯 Requirements

• 7+ years of experience in information security, healthcare compliance, privacy, or risk management, preferably within healthcare SaaS or health technology • Strong knowledge of HIPAA, SOC 2, HITRUST, healthcare privacy requirements, and security control frameworks • Proven experience leading audits, risk assessments, compliance programs, and remediation activities, including directing external advisors and assessors • Proven experience leading at least one HITRUST certification (i1 or r2) end to end as the accountable owner, including scoping, evidence collection, assessor management, and corrective action plans • Practical understanding of cloud/SaaS security, identity and access management, vulnerability management, encryption, logging, data protection, and incident response • Experience partnering with Engineering and Product teams to incorporate security into technology and development processes • Experience with vendor risk management and third-party security assessments • Strong communication skills with the ability to translate security and regulatory requirements for technical and non-technical audiences • Experience working with healthcare technology, EMRs, clinical systems, or healthcare data environments • Preferred: experience with PACE, value-based care, Medicare/Medicaid, or regulated healthcare environments • Preferred: experience building or scaling security and compliance programs in a growing SaaS company • Preferred: experience securing cloud-native environments, including Azure and Kubernetes/AKS, DevSecOps, and security automation • Preferred: experience leading a small security/compliance team or cross-functional security initiatives • Preferred: relevant certifications such as CCSFP, CISSP, CISM, or HCISPP • Must be based in the United States • This position is not eligible for sponsorship