Security & Compliance Lead – HITRUST, SOC 2, HIPAA

Leap; New York (NY); On-site; USD 150,000 - 210,000; Full time

Job summary

Leap is hiring a Senior Manager, Security & Compliance to lead our security program and shape its next phase. You’ll own HITRUST, SOC 2 Type II, and HIPAA-aligned controls while steering the program’s direction.

This hands-on role builds end-to-end controls, writes policies, conducts audits, and manages an external security partner. You’ll work with Engineering, Operations, and GTM teams to scale security across the data stack on GCP.

Qualifications

• 7+ years in healthcare information security, governance/risk/compliance (GRC), or IT audit.
• Direct ownership of at least one full SOC 2 Type II audit cycle.
• Hands-on experience completing security questionnaires and representing the company with enterprise or health plan security teams.
• Working knowledge of HIPAA Security and Privacy Rules and PHI handling in B2B healthcare.

Responsibilities

• Lead HITRUST certification from kickoff through completion next year, including gap assessment and remediation.
• Own SOC 2 Type II end-to-end management, including evidence collection and auditor relationships.
• Maintain HIPAA security and privacy controls, core policies, and BAA obligations.
• Build a prioritized roadmap of improvements and tooling, roll out new controls across the company.

Skills

Security GRC

SOC 2

HIPAA

HITRUST

PHI handling

Cloud security

Security questionnaires

Vendor risk

Tools

Vanta

Drata

Secureframe

Job description

Leap is hiring a Senior Manager, Security & Compliance to lead our security program and shape its next phase. You’ll own HITRUST, SOC 2 Type II, and HIPAA-aligned controls while steering the program’s direction.

This hands-on role builds end-to-end controls, writes policies, conducts audits, and manages an external security partner. You’ll work with Engineering, Operations, and GTM teams to scale security across the data stack on GCP.