Senior Compliance & Audit Lead — SOC 2, ISO 27001, HIPAA

ASP-RCM Solutions; Dallas (TX); Híbrido; USD 110.000 - 160.000; Tempo integral

Resumo da vaga

Asprcmsolutions in Dallas, TX is seeking a seasoned compliance professional to own our SOC 2 Type II, ISO 27001 and HIPAA program. You will ensure controls are operating, evidence is collected on schedule, gaps are remediated, and the organization remains audit-ready for clients and auditors.

You will respond to client security questionnaires, drive remediation across teams without direct authority, and maintain policy currency, risk assessments, and training materials to support a strong

Qualificações

• Four or more years in compliance, audit or information security in a regulated environment.
• Hands-on with SOC 2 and ISO 27001 audit cycles.
• Strong working knowledge of HIPAA privacy and security rules.
• Able to drive remediation across teams without direct authority.
• Clear, precise written communication for client-facing responses.

Responsabilidades

• Audit readiness across SOC 2 Type II, ISO 27001 and HIPAA programs.
• Evidence discipline: collect and organize evidence on schedule.
• Lead client security reviews and respond to questionnaires.
• Perform risk assessments and maintain policy currency.
• Coordinate remediation across teams without direct authority.
• Develop and maintain training and awareness materials.

Conhecimentos

SOC 2 audits

ISO 27001 audits

HIPAA knowledge

Remediation leadership

Client questionnaires

Descrição da vaga

You own our compliance program across SOC 2 Type II, ISO 27001 and HIPAA. That means keeping controls genuinely operating, not just documented: evidence collected on schedule, gaps remediated, and the organisation ready when an auditor or a client security team arrives. You are also the person who answers client security questionnaires and stands behind the answers.

What you will own: Audit readiness; Evidence discipline; Client security reviews; Risk assessment; Policy currency; Training and awareness

What we look for: Four or more years in compliance, audit or information security in a regulated environment; Hands-on with SOC 2 and ISO 27001 audit cycles; Strong working knowledge of HIPAA privacy and security rules; Able to drive remediation across teams without direct authority; Clear, precise written communication for client-facing responses Travel is a requirement of this role, not an occasional extra. You are expected to travel whenever the business needs it, including ad hoc trips at short notice.