Director, Security & Privacy – HIPAA, HITECH Act

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $134.4k - $186.7k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

FUJIFILM Corporation

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1934

🏭 Manufacturing

🏥 Healthcare

Manufacturing • Healthcare • Electronics

FUJIFILM Corporation is a global company established in 1934, operating in diverse fields including healthcare, electronics, and imaging. As a total healthcare company, FUJIFILM develops a wide range of businesses in prevention, diagnosis, and treatment. Additionally, the company focuses on environmental sustainability through improved industrial efficiency, while also capturing and preserving memories through film and photography, enriching emotional lives and human connections.

📋 Description

• Lead HCUS’s enterprise security and privacy programs • Advise executive leadership on the organization’s security posture, technology, privacy, and operational risks • Coordinate security activities across HCUS business units and with HLUS and FTYO teams • Serve as HCUS’s designated HIPAA Security Officer and HIPAA Privacy Officer • Develop, implement, maintain, and enforce information security and privacy programs • Establish and maintain governance supporting HIPAA, HITECH, SOC 2, state privacy laws, breach-notification requirements, contractual obligations, and healthcare/security standards • Present security, privacy, audit, and risk metrics to executives and stakeholders • Monitor regulatory changes and translate them into organizational improvements • Own security and privacy policies, standards, procedures, documentation, and HIPAA records • Lead program assessments and continuous security and privacy maturity improvements • Lead enterprise-wide security and privacy risk assessments and track remediation • Partner with Engineering, Product Management, Shared IT Services, Legal, and TAC teams to integrate security and privacy into system design, development, deployment, and operations • Oversee vulnerability management, penetration testing, security testing, configuration reviews, access control reviews, and remediation tracking • Lead HCUS’s SOC 2 program, including scoping, control design, evidence collection, readiness, auditor coordination, remediation, and annual attestation • Coordinate internal/external audits, customer assessments, questionnaires, and regulatory inquiries • Maintain audit-ready evidence and monitor contractual, BAA, customer security, and data-protection obligations • Manage security incident and PHI breach response, including investigation, documentation, containment, remediation, notification decisions, and post-incident corrective actions • Oversee security architecture and safeguards for cloud environments, applications, endpoints, networks, identities, integrations, and data • Support IAM, MFA, encryption, logging/monitoring, secure configuration, vulnerability management, backup/recovery, and business continuity controls • Promote secure software development practices, including security requirements, code review, dependency management, testing, threat modeling, and release controls • Protect medical imaging data, DICOM workflows, integrations, APIs, interoperability platforms, and connected customer environments • Establish and oversee third-party risk management for vendors, subcontractors, cloud providers, and business partners handling sensitive data • Review vendor due diligence and ensure BAAs and security requirements are in place before third-party PHI access • Support customer security reviews and discussions with customer security, privacy, procurement, and compliance teams • Develop and administer security and privacy awareness training, including role-based training • Foster a culture of security, privacy, accountability, and timely incident reporting • Comply with applicable U.S. FDA, ISO 13485, and other laws, regulations, and standards

🎯 Requirements

• Bachelor’s degree in Information Security, Cybersecurity, Information Technology, Healthcare Administration, Privacy, Risk Management, or a related field; equivalent experience may be considered • 7+ years of progressive experience in information security, privacy, compliance, risk management, healthcare technology, or related discipline • 3+ years of experience leading or managing security, privacy, compliance, or governance programs • Demonstrated experience with HIPAA Privacy Rule, HIPAA Security Rule, HITECH Act requirements, and healthcare breach response • Experience leading SOC 2 readiness, audits, control implementation, and evidence management • Experience conducting risk assessments, developing risk treatment plans, and managing remediation activities • Experience developing and maintaining incident response, business continuity, and disaster recovery processes • Strong knowledge of NIST Cybersecurity Framework, NIST SP 800-53, NIST SP 800-66, CIS Controls, ISO 27001, and SOC 2 Trust Services Criteria • Familiarity with cloud security, SaaS application security, identity and access management, encryption, logging/monitoring, secure software development practices, and vendor risk management • Ability to communicate complex security, privacy, and regulatory concepts to technical teams, customers, executives, and non-technical workforce members • Strong judgment, organizational skills, attention to detail, and ability to manage sensitive and confidential matters • Occasional travel may be required, up to 25% • Ability to perform the listed physical demands, including sitting, using hands and fingers, standing, talking, hearing, lifting and carrying up to ten pounds, and close vision • Preferred: Experience in healthcare SaaS, medical imaging, health IT, clinical informatics, PACS, RIS, DICOM, interoperability, or medical device-adjacent environments • Preferred: Certifications such as CISSP, CISM, CISA, CRISC, HCISPP, CHPC, CHC, CHSP, CIPM, CIPP/US, or equivalent • Preferred: Experience with HITRUST, ISO 27001, PCI DSS, FDA cybersecurity considerations, or state healthcare privacy regulations • Preferred: Experience managing customer security assessments and enterprise healthcare customer requirements • Preferred: Experience with AWS, Microsoft Azure, or Google Cloud Platform • Preferred: Familiarity with security operations, SIEM/logging platforms, endpoint protection, vulnerability scanning, and cloud security posture management tools

🏖️ Benefits

• Medical insurance • Dental insurance • Vision insurance • Life insurance • 401K • Paid Time Off • Reasonable accommodation during the application and selection process • COVID-19 vaccination accommodation for medical, religious, or other legally required exemptions