Security & Compliance Leader for HIPAA & SOC 2

Embedded Shishya; United States; Remote; USD 190,000 - 220,000; Full time

Benefits offered by this job

Unlimited PTO

Health coverage

Equity options

401(k) with match

Student loan support

Competitive compensation

Job summary

Collectly seeks a senior security and compliance leader to own the end-to-end program for a PHI-handling platform. You’ll automate evidence, streamline controls, and answer customer questions directly with stakeholders across security, privacy, and governance.

You will lead SOC 2 and HITRUST readiness, HIPAA risk analyses, and vendor risk. Expect collaboration with DevOps and product teams, plus regular customer-facing audits and responses.

Qualifications

• Extensive experience in security compliance or GRC, including PHI-handling environment.

Responsibilities

• Own the security and compliance program end to end.

Skills

Security compliance

GRC

HIPAA fluency

SOC 2 ownership

HITRUST ownership

Vanta

Compliance automation

NIST RMF

ISO 42001 knowledge

Threat modeling

Clear customer-facing prose

Tools

Vanta

Security scanners

CI / IaC

Cloud config

Job description

Collectly seeks a senior security and compliance leader to own the end-to-end program for a PHI-handling platform. You’ll automate evidence, streamline controls, and answer customer questions directly with stakeholders across security, privacy, and governance.

You will lead SOC 2 and HITRUST readiness, HIPAA risk analyses, and vendor risk. Expect collaboration with DevOps and product teams, plus regular customer-facing audits and responses.