Remote Security & Compliance Lead (HIPAA, HITRUST, SOC 2)

intus; USA; Remote; USD 130.000 - 150.000; Vollzeit

Benefits dieser Stelle

Fully remote in the United States

Zusammenfassung

intus is seeking a Senior Security, Privacy, and Compliance Leader to drive and mature a healthcare SaaS information security program. You will own HIPAA, SOC 2, HITRUST, incident response, and vendor risk, partnering with Engineering, Product, SRE, IT, Legal, and customers.

You will lead end-to-end HITRUST certification, manage audits and risk assessments, and shape security controls, data handling standards, and BAAs. Fully remote in the United States.

Qualifikationen

• 7+ years in information security, healthcare compliance, privacy, or risk management, preferably in healthcare SaaS.
• Strong knowledge of HIPAA, SOC 2, HITRUST, and security control frameworks.
• Proven experience leading HITRUST certification end-to-end as accountable owner.
• Practical understanding of cloud/SaaS security, IAM, encryption, logging, data protection, and incident response.
• Experience partnering with Engineering and Product to embed security into development processes.
• Strong communication skills translating requirements for technical and non-technical audiences.

Aufgaben

• Own and mature security and compliance programs across HIPAA, SOC 2, HITRUST, and privacy requirements.
• Lead HITRUST certification end-to-end, including scoping, evidence collection, assessor coordination, and corrective action plans.
• Manage internal and external audits, risk assessments, penetration tests, and remediation efforts.
• Partner with Engineering, Product, SRE, and IT to embed security into architecture, infrastructure, and the SDLC.
• Oversee critical controls including access management, logging, encryption, vulnerability management, and vendor risk.
• Lead incident response and maintain security policies, BAAs, data handling standards, and breach response plans.

Kenntnisse

HIPAA knowledge

SOC 2 experience

HITRUST experience

Security controls

Cloud/SaaS security

IAM

Incident response

Audits & risk management

Cross-functional collaboration

Tools

Azure

Kubernetes/AKS

Jobbeschreibung

intus is seeking a Senior Security, Privacy, and Compliance Leader to drive and mature a healthcare SaaS information security program. You will own HIPAA, SOC 2, HITRUST, incident response, and vendor risk, partnering with Engineering, Product, SRE, IT, Legal, and customers.

You will lead end-to-end HITRUST certification, manage audits and risk assessments, and shape security controls, data handling standards, and BAAs. Fully remote in the United States.