Security & Compliance Manager

Thompson Street Capital Partners; Oklahoma City (OK); On-site; USD 90,000 - 140,000; Full time

Job summary

Thompson Street Capital Partners is seeking a RMS Compliance Manager to ensure adherence to HIPAA, SOC 2, ISO 27001, and related standards across the organization. The role oversees policy creation, incident response, and vendor risk monitoring while coordinating privacy and regulatory obligations.

The position emphasizes training, documentation, and collaboration with cross-functional teams to sustain a culture of ethical operations and strong controls.

Qualifications

• Working knowledge of HIPAA, SOC 2, ISO 27001, or industry standards.
• Experience supporting audits, regulatory exams, and control assessments.
• Strong understanding of risk management and internal control design.
• Professional certifications preferred (CISSP/CISM/CISA/CRCM/CCEP).
• Excellent analytical, problem-solving, and documentation skills.
• Strong written and verbal communication across technical and non-technical teams.

Responsibilities

• Conduct risk assessments and internal control testing.
• Prepare for external audits, regulatory inquiries, and legal requests.
• Manage third-party vendor risk assessments and monitoring.
• Oversee incident and breach response, including investigation and remediation.
• Maintain SOC 2 controls and documentation.
• Draft, update, and enforce compliance policies and procedures.
• Lead mandatory compliance training programs and LMS reporting.
• Coordinate privacy aspects of incident response and regulatory reporting.
• Evaluate systems for regulatory and ethical compliance.
• Partner with cross-functional leaders to ensure operational compliance.

Skills

HIPAA

SOC 2

ISO 27001

CISSP

CISM

CISA

CRCM

CCEP

Risk management

Internal controls

Documentation

Education

Bachelor's degree in Business, Legal Studies, Compliance, Information Security, Risk Management

Tools

LMS

Microsoft Office

Job description

Thompson Street Capital Partners is seeking a RMS Compliance Manager to ensure adherence to HIPAA, SOC 2, ISO 27001, and related standards across the organization. The role oversees policy creation, incident response, and vendor risk monitoring while coordinating privacy and regulatory obligations.

The position emphasizes training, documentation, and collaboration with cross-functional teams to sustain a culture of ethical operations and strong controls.