Security & Compliance Lead for HIPAA & SOC2 Readiness

GRC Careers, LLC; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

FamilyWell Health is an AI-enabled mental health startup expanding nationwide and seeking a Security & Compliance Manager to own the operational backbone of security and compliance programs. You will run the security calendar, track risk assessment and pentest remediation to closure, and manage vendor BAAs and regulatory alignment.

You will draft policies, oversee audits, monitor MDM/BYOD compliance, and work with the IT team to advance toward SOC2 or HITRUST certification timelines, reporting

Qualifications

• Experience managing enterprise security programs and regulatory compliance.
• Knowledge of HIPAA Security Rule and SOC2/HITRUST planning.
• Ability to coordinate third-party risk assessments and BAAs.

Responsibilities

• Manage day-to-day security program operations and risk assessments.
• Coordinate penetration tests and remediation tracking.
• Lead security awareness training and annual calendar.
• Draft and maintain policies and procedures for CISO review.
• Coordinate vendor security assessments and BAAs audits.
• Monitor MDM/BYOD device compliance with IT and MSP.
• Prepare for future compliance certifications (SOC2 or HITRUST).

Skills

Security governance

Risk assessment

Penetration testing coordination

HIPAA compliance

Vendor risk management

BAA audits

MDM/BYOD monitoring

Policy writing

Job description

FamilyWell Health is an AI-enabled mental health startup expanding nationwide and seeking a Security & Compliance Manager to own the operational backbone of security and compliance programs. You will run the security calendar, track risk assessment and pentest remediation to closure, and manage vendor BAAs and regulatory alignment.

You will draft policies, oversee audits, monitor MDM/BYOD compliance, and work with the IT team to advance toward SOC2 or HITRUST certification timelines, reporting