Senior Director, Information Security & HIPAA — Remote

Prompt Health; United States; Hybrid; USD 200,000 - 240,000; Full time

Benefits offered by this job

Remote/hybrid environment

Competitive salaries

Equity potential

Job summary

Prompt Therapy Solutions, Inc in the United States seeks a Senior Director of Information Security to serve as HIPAA Security Officer and lead the security program.

You will own HIPAA/HITECH compliance, SOC 2 Type II, attestations, and policy framework, while partnering with Engineering, Legal and Privacy to translate risks into controls.

This hands-on leadership role builds and mature the security program, ensuring secure SDLC, third‑party risk, incident response, and ongoing governance.

Qualifications

• 8+ years in information security, risk management or compliance with leadership
• Deep practical HIPAA/HITECH healthcare security knowledge
• Cloud security, IAM, vulnerability management, secure SDLC
• Experience leading SOC 2 Type II or similar programs
• Governance, policy framework, audit readiness experience
• Knowledge of AI security, governance and risk management
• Ability to translate technical issues into business impact

Responsibilities

• Lead HIPAA Security Officer responsibilities and partner with Legal, Privacy, Compliance, and Engineering
• Assess cloud architectures, CI/CD, IaC, IAM, and software supply-chain controls
• Own HIPAA Security Rule compliance and risk management program
• Own SOC 2 Type II program and audits, governance, remediation
• Develop and govern information-security policy and control framework
• Establish ownership for security controls and remediation tracking
• Collaborate with Engineering, DevOps, IT to implement controls
• Oversee vulnerability management and application security programs
• Lead incident response framework and cross-functional coordination
• Manage third-party risk management and security escalations
• Govern emerging tech governance and data use with stakeholders
• Ensure secure SDLC and software supply-chain controls
• Monitor effectiveness of security controls and reporting

Skills

HIPAA/HITECH

Cloud security

SOC 2 Type II

AI security

Security governance

Executive communication

Third-party risk

Education

CISSP

CISM

CRISC

CISA

CHC

Job description

Prompt Therapy Solutions, Inc in the United States seeks a Senior Director of Information Security to serve as HIPAA Security Officer and lead the security program.

You will own HIPAA/HITECH compliance, SOC 2 Type II, attestations, and policy framework, while partnering with Engineering, Legal and Privacy to translate risks into controls.

This hands-on leadership role builds and mature the security program, ensuring secure SDLC, third‑party risk, incident response, and ongoing governance.