Remote HIPAA Security Director & SOC 2 Leader

prompt; United States; Remote; USD 180,000 - 280,000; Full time

Benefits offered by this job

Competitive salaries

Remote/hybrid environment

Potential equity compensation for high

Flexible PTO

Company-wide sponsored lunches

Disability and life insurance

Family and medical leave

Medical, dental, vision insurance

Pet insurance discount

FSA/DCA and commuter benefits

401k

Fitness program credits

Recovery suite at HQ

Job summary

Prompt Therapy Solutions, Inc seeks a Senior Director of Information Security to act as HIPAA Security Officer and mature the company’s security program. You will own governance, risk management, policy framework, and audits while partnering with Legal, Privacy, Compliance, Engineering, IT, and product teams to implement controls across cloud and on‑prem environments.

You will drive the security strategy for HIPAA/HITECH compliance, SOC 2 Type II readiness, and third‑party risk management in a

Qualifications

• 8+ years in information security, risk management, or compliance with leadership experience.
• Deep knowledge of HIPAA/HITECH and healthcare security requirements.
• Strong knowledge of cloud/security architectures and modern SaaS.
• Experience leading SOC 2 Type II or comparable programs.
• Ability to translate technical issues into business impact for stakeholders.

Responsibilities

• Lead HIPAA Security Officer duties and mature the security program.
• Own Security Rule compliance and risk management.
• Oversee SOC 2 Type II and other certifications and audits.
• Maintain security policy framework and governance across the org.
• Partner with Engineering, IT, Legal, and Product to secure systems.

Skills

HIPAA Security

Security Governance

Cloud Security

SOC 2 & Certifications

Executive Communication

Cross‑functional Leadership

Security Incident Response

AI Security Awareness

Risk Management

Third‑party Risk

Tools

SOC 2 Type II

Job description

Prompt Therapy Solutions, Inc seeks a Senior Director of Information Security to act as HIPAA Security Officer and mature the company’s security program. You will own governance, risk management, policy framework, and audits while partnering with Legal, Privacy, Compliance, Engineering, IT, and product teams to implement controls across cloud and on‑prem environments.

You will drive the security strategy for HIPAA/HITECH compliance, SOC 2 Type II readiness, and third‑party risk management in a