Healthcare IT Security & Compliance Lead (HIPAA & AI)

Premium Health Center; New York (NY); Hybrid; USD 140,000 - 210,000; Full time

Benefits offered by this job

Paid time off

Medical, dental, and vision plans

Retirement plans

PSLF

Job summary

Premium Health Center is seeking an IT Security & Compliance Lead to own the organization’s security, risk, and HIPAA compliance across a multi-site ambulatory healthcare environment. The role focuses on governance, controls, and AI risk management while enabling efficient clinical workflows.

The candidate will partner with IT, clinical applications, data, and operations to mature security practices aligned with NIST and industry standards. Remote work up to 20% is available.

Qualifications

• 5+ years of IT security, compliance, or risk management experience.
• Healthcare or regulated environment experience preferred (HIPAA)
• Experience managing security programs, audits, and compliance initiatives
• Strong understanding of IAM, vendor risk, and security controls

Responsibilities

• Own and operate the organization’s security program, policies, and controls.
• Lead HIPAA compliance efforts, audits, and remediation tracking.
• Manage vendor security reviews, BAAs, and third-party risk.
• Oversee identity and access management, access reviews, and least-privilege controls.
• Coordinate security incidents with SOC/EDR partners and define response processes.
• Establish practical AI governance and guardrails for PHI handling.
• Provide security awareness training and leadership reporting.

Skills

IT security

Compliance

HIPAA

Vendor risk

Incident response

AI governance

NIST/CIS

Cross-functional

Tools

Microsoft 365 security

SIEM

DLP

Endpoint protection

MFA/CA

Job description

Premium Health Center is seeking an IT Security & Compliance Lead to own the organization’s security, risk, and HIPAA compliance across a multi-site ambulatory healthcare environment. The role focuses on governance, controls, and AI risk management while enabling efficient clinical workflows.

The candidate will partner with IT, clinical applications, data, and operations to mature security practices aligned with NIST and industry standards. Remote work up to 20% is available.