Security & Compliance Leader – HITRUST Focus, Equity

Leap Health; United States; Remote; USD 150,000 - 190,000; Full time

Benefits offered by this job

Equity

Health insurance

Career growth

Flexible work options

Job summary

Leap is hiring a Senior Manager, Security & Compliance to lead the next phase of our security program. We have SOC 2 Type II and HIPAA-aligned controls.

Now we're looking for a leader to shape the program, own HITRUST certification, and drive audits, policies, and vendor reviews. This hands-on role is highly autonomous, partnering with Engineering, Operations, and GTM teams, and managing our external security partner.

Qualifications

• 7+ years in healthcare information security, GRC, or IT audit.
• Deep familiarity with SOC 2, HIPAA, and HITRUST.
• Experience building security programs from scratch or as an early security hire.
• Hands-on with security questionnaires and enterprise health-plan security teams.
• Working knowledge of PHI handling in B2B healthcare.

Responsibilities

• Lead HITRUST certification from kickoff through completion.
• Own SOC 2 Type II end to end, including evidence collection & auditor liaison.
• Maintain HIPAA security/privacy controls, policies and BAAs.
• Roll out new controls and policies with Engineering on GCP/data stack.
• Run security questionnaires and vendor risk reviews; respond to requests.

Skills

Security leadership

SOC 2 Type II

HIPAA knowledge

PHI handling

Cloud security (GCP)

Vendor risk management

Policy writing

Education

CISSP

CISA

CISM

CRISC

Bachelor's in CS/IS

Tools

Vanta

Drata

Secureframe

GCP

Audit management tools

Job description

Leap is hiring a Senior Manager, Security & Compliance to lead the next phase of our security program. We have SOC 2 Type II and HIPAA-aligned controls.

Now we're looking for a leader to shape the program, own HITRUST certification, and drive audits, policies, and vendor reviews. This hands-on role is highly autonomous, partnering with Engineering, Operations, and GTM teams, and managing our external security partner.