Security Compliance Program Lead - Hybrid, PTO & 401(k)

CentralReach; Holmdel Township (NJ); Hybrid; USD 100,000 - 120,000; Full time

Benefits offered by this job

Health benefits

Paid time off

401(k) matching

Parental leave

Hybrid work schedule

Job summary

CentralReach, a leading ABA and IDD care software provider, seeks a Security Compliance Program Manager to own the compliance program with the CCO and CISO. You will translate regulatory standards into action plans, build KPIs, and develop incident response capabilities across Security and IT teams.

This role drives audits (SOC 2 Type 2, HIPAA, Privacy, Security) and implements governance processes with a focus on automation, risk assessments, and policy updates.

Qualifications

• Experience working with auditors through internal and external security and compliance audits.
• Ability to translate regulatory or security frameworks into concrete action items for cross-functional teams.
• Experience developing KPIs, metrics, and reporting cadences for leadership.
• Familiarity with security monitoring, alerting, and incident response concepts.
• Experience with Business Continuity and Disaster Recovery planning.
• Process improvement and automation mindset, including GRC tool evaluation and implementation.
• Strong cross-functional collaboration and stakeholder management.
• Proven ability to manage multiple compliance initiatives with competing timelines.

Responsibilities

• Own and drive the compliance program with cross‑functional teams.
• Translate requirements into action plans and track rollout progress.
• Develop KPIs and dashboards for leadership reporting.
• Support automated risk, incident response, and access reviews.
• Maintain audit readiness and manage internal audits and external attestations.
• Oversee vendor management and security/compliance policy updates.

Skills

Audits management

Regulatory standards

NIST 800-53

SOC 2

HIPAA

ISO 27001

KPIs reporting

Incident response

BCDR planning

GRC tools

Cross-functional collab

Tools

GRC tools

Job description

CentralReach, a leading ABA and IDD care software provider, seeks a Security Compliance Program Manager to own the compliance program with the CCO and CISO. You will translate regulatory standards into action plans, build KPIs, and develop incident response capabilities across Security and IT teams.

This role drives audits (SOC 2 Type 2, HIPAA, Privacy, Security) and implements governance processes with a focus on automation, risk assessments, and policy updates.