Security Engineer: HITRUST & SOC 2 Lead (Remote)

Aradigm; United States; Remote; USD 140,000 - 175,000; Full time

Benefits offered by this job

Health coverage

Equity

401(k)

Job summary

Aradigm, a public benefit corporation, is hiring its first Security Engineer to own HITRUST r2 and SOC 2 Type 2 programs. You will lead policy development, control implementation, evidence collection, and auditor interactions while collaborating with engineering, data teams, and legal counsel.

This hands-on role requires building secure, scalable practices; you’ll guide secure design reviews, governance of AI/data tools, and vendor risk management from our NYC-influenced East Coast base with

Qualifications

• Authorized to work in the United States; Aradigm does not sponsor work visas.
• Background check and federal exclusion/debarment screening required at hire and annually.

Responsibilities

• Own HITRUST r2 and SOC 2 Type 2 programs, including scope expansion and evidence collection.
• Answer security questionnaires, diligence requests, and audit asks from employers, health plans, and carriers.
• Review security designs for new systems and audit cloud (GCP) implementation.
• Operate DLP tooling and AI governance controls for data access.
• Assess vendors and subprocessors; align BAAs with data flows.
• Collaborate with IT to ensure endpoint management and security tooling is properly deployed.
• Write and maintain security policies, train staff, and manage incident response planning.

Skills

Security & Compliance

GRC

HIPAA knowledge

Cloud security (GCP)

Security auditing

Policy writing

Vendor risk

Tools

GCP

Google Workspace security

Job description

Aradigm, a public benefit corporation, is hiring its first Security Engineer to own HITRUST r2 and SOC 2 Type 2 programs. You will lead policy development, control implementation, evidence collection, and auditor interactions while collaborating with engineering, data teams, and legal counsel.

This hands-on role requires building secure, scalable practices; you’ll guide secure design reviews, governance of AI/data tools, and vendor risk management from our NYC-influenced East Coast base with