Senior Director, Information Security & HIPAA (Remote)

Prompt Health; United States; Hybrid; USD 180,000 - 240,000; Full time

Benefits offered by this job

Competitive salaries

Remote/hybrid environment

Potential equity compensation for outs

Flexible PTO

Company-wide sponsored lunches

Company paid disability and life insur

Company paid family and medical leave

Medical, dental, and vision insurance

Discounted pet insurance

FSA/DCA and commuter benefits

401k

Credits for online fitness classes/gym

Recovery suite at HQ - includes a cold

Job summary

Prompt Health is seeking a Senior Director, Information Security to lead our HIPAA Security Officer program and mature the company’s information security program. You will partner with Legal, Privacy, Compliance, Engineering, IT and business leaders to translate security requirements into effective controls and sustainable processes.

This role drives HIPAA/HITECH and SOC 2 Type II compliance, governance, and risk management, with hands-on leadership and collaboration across technical and

Qualifications

• Deep practical knowledge of HIPAA/HITECH and healthcare security requirements.
• Experience leading SOC 2 Type II or comparable certification programs.
• Ability to translate security issues into business, compliance, customer impact.
• Strong executive judgment and cross-functional collaboration.
• Certifications such as CISSP, CISM, CRISC, CISA preferred but not required.

Responsibilities

• Serve as the company’s designated HIPAA Security Officer, leading the information security program and partnering with Legal, Privacy, Compliance, Engineering, IT, and other stakeholders.
• Maintain technical depth to assess cloud architectures, CI/CD pipelines, infrastructure-as-code, IAM models, and software supply-chain controls.
• Own HIPAA Security Rule compliance, risk management plan, and ongoing safeguards oversight.
• Own the SOC 2 Type II program, audits, evidence sufficiency, remediation, and auditor relationships.
• Own the information-security policy and control framework, ensuring governance and alignment with requirements.
• Establish ownership for security controls and track deficiencies, risks, and remediation.
• Partner with Engineering, DevOps, architecture, and IT to evaluate security approaches and controls.
• Oversee vulnerability-management and application-security programs, including testing and remediation.
• Own the incident-response framework and coordinate responses with stakeholders.
• Lead third-party risk management, audits, RFPs/RFIs, and security escalations.
• Collaborate with Product, AI, Engineering, Legal for governance of emerging technologies.
• Establish secure SDLC and software supply-chain requirements, including secrets management and release controls.
• Maintain visibility into effectiveness of controls across access, data protection, cloud security, logging, and continuity.
• Provide executive leadership with risk visibility and remediation progress.
• Continuously improve the information-security operating model for clear ownership and durable controls.

Skills

HIPAA Security Officer

SOC 2 Type II

Cloud security

IAM

Vulnerability management

Secure SDLC

Incident response

Third-party risk management

AI security governance

Executive communication

Job description

Prompt Health is seeking a Senior Director, Information Security to lead our HIPAA Security Officer program and mature the company’s information security program. You will partner with Legal, Privacy, Compliance, Engineering, IT and business leaders to translate security requirements into effective controls and sustainable processes.

This role drives HIPAA/HITECH and SOC 2 Type II compliance, governance, and risk management, with hands-on leadership and collaboration across technical and