Remote Security Engineer — HITRUST & SOC 2 Leader

Aradigm; Oregon; Hybrid; USD 140,000 - 175,000; Full time

Benefits offered by this job

Health insurance

Job summary

Aradigm, a public benefit corporation, is hiring its first Security Engineer to own HITRUST r2 and SOC 2 Type 2 programs, including policy creation, control implementation, evidence collection, and auditor communications.

The role is remote within the United States with a preference for the East Coast and periodic NYC travel (3–5 times per year). Report to Head of Engineering and partner with legal, IT, and data teams.

Qualifications

• Must be authorized to work in the United States; Aradigm does not sponsor work visas.
• Background check and federal exclusion/debarment screening required annually.

Responsibilities

• Own HITRUST r2 and SOC 2 Type 2 programs, manage scope and evidence.
• Lead security reviews and respond to security questionnaires from employers and partners.
• Review cloud security designs (GCP) and provide actionable feedback to engineers.
• Oversee data loss prevention and AI governance controls.
• Assess vendors and subprocessors; coordinate with legal on BAAs.
• Collaborate with IT to ensure endpoint management and security tooling.
• Develop and maintain security policies, incident response plans, and risk register.

Skills

Security and compliance

HITRUST knowledge

SOC 2

GCP security

Vendor risk management

Tools

GCP

EDR tooling

Job description

Aradigm, a public benefit corporation, is hiring its first Security Engineer to own HITRUST r2 and SOC 2 Type 2 programs, including policy creation, control implementation, evidence collection, and auditor communications.

The role is remote within the United States with a preference for the East Coast and periodic NYC travel (3–5 times per year). Report to Head of Engineering and partner with legal, IT, and data teams.