Security and Compliance Manager

Job not on LinkedIn

🔥 16 hours ago

🇺🇸 United States – Remote

💵 $132k - $140k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 19%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

FamilyWell Health

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2022

⚕️ Healthcare Insurance

🏥 Healthcare

🧘 Wellness

Healthcare Insurance • Healthcare • Wellness

FamilyWell Health is a healthcare company that specializes in providing integrated behavioral health services for pregnant and postpartum individuals. By incorporating mental health support into obstetric practices, FamilyWell aims to address the significant number of women experiencing perinatal mental health issues. The company's services are covered by insurance, allowing obstetric clinics to offer easily billable care while improving patient outcomes through timely access to mental health resources and support.

📋 Description

• Own day-to-day management of the security program, including Security Risk Assessment cadence, penetration test coordination and remediation tracking, phishing simulations, and the annual security awareness training calendar • Draft Policies & Procedures for CISO and leadership review/approval and keep documentation current • Lead vendor security assessments and Business Associate Agreement audits across the vendor ecosystem • Own MDM/BYOD device compliance monitoring with the IT Systems Administrator and MSP • Serve as day-to-day lead on incident/breach response, escalating to the CPO and contractor CISO • Support identity and access management improvements, including SSO and a company-wide password manager • Prepare recurring board-level risk and compliance status reporting and a forward-looking roadmap • Own compliance-automation tooling evaluation and rollout, such as Drata or Vanta • Track open items from SRAs, audits, and vendor reviews to closure using the Security Program Tracker • Help define and maintain AI security guardrails, including PHI handling policies for AI tools • Maintain detailed documentation and records of security controls, risks, incidents, vendor audits, and roadmap initiatives

🎯 Requirements

• 3–6+ years of experience in security compliance, IT security, or GRC (governance, risk, and compliance) roles • Direct experience with HIPAA Security Rule requirements, Security Risk Assessments, and vendor/BAA risk reviews — ideally in healthcare or another regulated industry • Comfortable running a security calendar and tracking remediation items to closure across multiple stakeholders • Experience partnering with a fractional or contractor CISO, MSP, or outside security advisor, and translating technical risk into clear, non-technical reporting for leadership or a board • Strong documentation and project management habits • Ability to work independently in a fast-paced, remote startup environment • Nice-to-have: Direct experience preparing for or achieving SOC2 or HITRUST certification • Nice-to-have: Familiarity with compliance automation platforms (Drata, Vanta, or similar) • Nice-to-have: Experience with MDM/endpoint tools, Google Workspace security controls (DLP, Vault), and password manager rollouts • Nice-to-have: Experience in an early-stage or high-growth startup, comfortable building process from scratch • Nice-to-have: Familiarity with AI governance/security considerations for tools used with PHI