InfoSec Senior Director: HIPAA & Compliance (Remote)

LaunchTN; United States; Hybrid; USD 180,000 - 250,000; Full time

Benefits offered by this job

Remote/hybrid environment

Equity compensation (potential)

Flexible PTO

Medical, dental, and vision insurance

401k

Job summary

Prompt Therapy Solutions, Inc is seeking a Senior Director, Information Security to serve as the HIPAA Security Officer and lead the maturation of our information security program. You will own governance, policy, risk management, and audits to maintain HIPAA/HITECH, SOC 2 Type II, and other regulatory requirements.

You will collaborate with Legal, Privacy, Compliance, Engineering, IT, and executive leadership to translate security risks into effective controls and sustainable processes,

Qualifications

• Deep knowledge of HIPAA/HITECH and healthcare security requirements.
• Strong experience with cloud security and SaaS architectures.
• Proven track record leading SOC 2 Type II or similar programs.
• Experience building governance, policy, and audit readiness.

Responsibilities

• Oversee HIPAA Security Rule compliance and risk management.
• Lead SOC 2 Type II program and attestations, audits, and evidence gathering.
• Own information-security policy and control framework across the company.
• Coordinate security controls with Engineering, DevOps, and IT leaders.
• Manage vulnerability, application-security, and secure SDLC programs.
• Lead security incident response and third-party risk management.

Skills

HIPAA/HITECH knowledge

Cloud security

SOC 2 Type II experience

AI security governance

Leadership

Job description

Prompt Therapy Solutions, Inc is seeking a Senior Director, Information Security to serve as the HIPAA Security Officer and lead the maturation of our information security program. You will own governance, policy, risk management, and audits to maintain HIPAA/HITECH, SOC 2 Type II, and other regulatory requirements.

You will collaborate with Legal, Privacy, Compliance, Engineering, IT, and executive leadership to translate security risks into effective controls and sustainable processes,