Security & Compliance Lead: HIPAA & SOC 2 Expert

Prompt; United States; Hybrid; USD 180,000 - 280,000; Full time

Benefits offered by this job

Competitive salaries

Remote/hybrid environment

Equity potential

Flexible PTO

Sponsored lunches

Insurance benefits

Family and medical leave

Health, dental, vision

Pet insurance discounts

Commuter benefits

401k

Gym/fitness credits

HQ recovery suite

Job summary

Prompt is seeking a hands-on Senior Director, Security & Compliance to lead the company’s HIPAA/HITECH compliance and enterprise information security program. You will own risk management, policy governance, and certifications while partnering with Legal, Engineering, IT, and Product to implement technical controls.

The role demands deep healthcare compliance expertise, strong risk judgment, and the ability to translate complex issues into business impact.

Qualifications

• 8+ years of experience in compliance, information security, risk management, or related disciplines with leadership responsibilities.
• Deep practical knowledge of HIPAA/HITECH and healthcare compliance requirements.
• Experience leading SOC 2 Type II or comparable certification programs.
• Experience building governance, control environments, audit readiness, and cross-functional accountability.
• Knowledge of cloud security, SaaS architecture, IAM, vulnerability management, and secure SDLC.

Responsibilities

• Serve as Compliance Officer and HIPAA Security Officer.
• Own HIPAA/HITECH compliance, risk analysis, risk-management plan, and safeguards.
• Oversee SOC 2 Type II and other certifications, audits, attestations, and remediation.
• Own policy framework, development, approval, and governance.
• Establish clear ownership for controls and remediation tracking across the org.
• Collaborate with Engineering, DevOps, IT, and Legal to align security with business needs.
• Manage incident-response framework with Legal and Technical teams.
• Lead third-party risk management, audits, RFPs/RFIs and security escalations.
• Govern emerging technologies governance for sensitive data usage.
• Continuously improve the operating model for compliance and security.

Skills

HIPAA/HITECH

SOC 2 Type II

Cloud security

IAM

Vulnerability management

Endpoint security

Secure SDLC

SaaS architecture

Governance

Executive communication

Cross-functional leadership

Education

CISSP

CISM

CRISC

CISA

CHC

Tools

Policy framework tooling

Job description

Prompt is seeking a hands-on Senior Director, Security & Compliance to lead the company’s HIPAA/HITECH compliance and enterprise information security program. You will own risk management, policy governance, and certifications while partnering with Legal, Engineering, IT, and Product to implement technical controls.

The role demands deep healthcare compliance expertise, strong risk judgment, and the ability to translate complex issues into business impact.