Chief HIPAA & Security Compliance Officer

Launch Tennessee; United States; Hybrid; USD 180,000 - 260,000; Full time

Benefits offered by this job

Competitive salaries

Remote/hybrid environment

Equity potential

Flexible PTO

Company-sponsored lunches

Insurance benefits

Family and medical leave

Medical, dental, vision

Pet insurance discounts

Commuter benefits

401k

Wellness perks

HQ Recovery suite

Job summary

Prompt Therapy Solutions, Inc is seeking a hands-on Senior Director of Security & Compliance to lead and mature enterprise-wide HIPAA/HITECH and information-security programs. You will own risk analyses, governance frameworks, and ongoing certifications, working with Legal, Engineering, IT, Product, and Finance to embed robust controls across the organization.

The role emphasizes durable ownership, credible engagement with technical leaders, and a security-first mindset to enable rapid,

Qualifications

• 8+ years of experience in compliance, information security, risk management, or related disciplines, including meaningful leadership responsibility.
• Deep practical knowledge of HIPAA/HITECH and healthcare compliance requirements, ideally within a covered entity or business associate environment.
• Demonstrated experience leading SOC 2 Type II or comparable certification and assurance programs.
• Experience building or materially improving compliance governance, control environments, policy frameworks, audit readiness, and cross-functional accountability.
• Strong working knowledge of cloud security, application security, IAM, vulnerability management, endpoint security, secure SDLC practices, and modern SaaS architecture.
• Ability to engage credibly with technical leaders, evaluate proposed approaches, identify material risk, and translate technical issues into business, compliance, and customer impact.
• Strong executive judgment and communication skills, with the ability to work effectively across Legal, Engineering, Product, IT, People, Finance, auditors, customers, and executive leadership.
• Demonstrated ability to drive accountability across functions without relying solely on direct reporting relationships.
• Relevant certifications such as CISSP, CISM, CRISC, CISA, CHC, or similar are preferred but not required where equivalent experience is demonstrated.

Responsibilities

• Serve as the company’s Compliance Officer and designated HIPAA Security Officer, leading the company’s compliance and information security programs.
• Own HIPAA/HITECH compliance, including the Security Risk Analysis, risk-management plan, and ongoing oversight of required safeguards.
• Be accountable for SOC 2 Type II and other compliance certifications, attestations, and assurance programs, including audit readiness, auditor relationships, remediation, and evidence sufficiency.
• Own the company’s compliance and information-security policy framework, including policy development, review, approval, exceptions, and ongoing governance.
• Establish clear ownership for controls across the organization and ensure deficiencies, risks, and remediation plans are identified, tracked, and appropriately escalated.
• Partner with Engineering, DevOps, architecture, and IT leaders to evaluate security approaches and ensure technical controls appropriately address compliance and risk requirements.
• Own the security incident-response framework and partner with Legal, Privacy, technical teams, and executive leadership on incident assessment, response, and remediation.
• Lead the security and compliance aspects of third-party risk management, enterprise customer diligence, audits, RFPs/RFIs, and security escalations.
• Partner with Product, AI, Engineering, Legal, and other stakeholders to establish appropriate governance for emerging technologies and the use of sensitive data.
• Continuously improve the company’s compliance and security operating model so that requirements are clear, ownership is durable, and controls operate effectively in practice.

Job description

Prompt Therapy Solutions, Inc is seeking a hands-on Senior Director of Security & Compliance to lead and mature enterprise-wide HIPAA/HITECH and information-security programs. You will own risk analyses, governance frameworks, and ongoing certifications, working with Legal, Engineering, IT, Product, and Finance to embed robust controls across the organization.

The role emphasizes durable ownership, credible engagement with technical leaders, and a security-first mindset to enable rapid,