Security & Compliance Specialist: HIPAA, SOC 2 & HITRUST

Healthie; United States; Hybrid; USD 100,000 - 130,000; Full time

Job summary

Healthie is seeking a Security and Compliance Associate to join our NYC-hybrid team. You will support audits, assess vendor risk, and respond to security questions from customers and internal stakeholders.

You must be based in the United States, fluent in English, and capable of handling sensitive information with care. This role offers growth in a fast-moving healthcare software company with strong governance practices.

Qualifications

• Excellent written and verbal English communication suitable for security and compliance responses.
• Experience supporting third-party audits (SOC 2, HIPAA, HITRUST) and vendor risk.
• Ability to manage multiple requests across teams and vendors.

Responsibilities

• Assist in third-party audits (SOC 2, HIPAA, HITRUST) with evidence collection.
• Assess and remediate vendor security risks and drive items to closure.
• Answer security and compliance questions from customers and internal teams.
• Handle security/compliance questionnaires from customers and prospects.
• Coordinate requests across IT, Operations, Platform, R&D and executive offices.

Skills

Security awareness

Audit support

Vendor risk

Policy writing

Clear communication

AI prompts

English fluency

Tools

Vanta

Drata

SecureFrame

Thoropass

Job description

Healthie is seeking a Security and Compliance Associate to join our NYC-hybrid team. You will support audits, assess vendor risk, and respond to security questions from customers and internal stakeholders.

You must be based in the United States, fluent in English, and capable of handling sensitive information with care. This role offers growth in a fast-moving healthcare software company with strong governance practices.