Strategic Director, Cybersecurity & Compliance

Confidential; Houston (TX); On-site; USD 150,000 - 180,000; Full time

Job summary

Confidential in Houston seeks a Director of Cybersecurity & Compliance to lead enterprise security strategy across AWS, Azure, and Microsoft 365. This leader will drive HIPAA/HITECH, SOC 2, HITRUST compliance and oversee audits, risk management, and incident response in a multi-state behavioral health context.

The role partners with Technology, Clinical, Operations, and executive teams to protect patient data, ensure scalable resilience, and align security controls with regulatory requirements.

Qualifications

• 8+ years in cybersecurity, IT audit, GRC, or related discipline.
• 3+ years of leadership experience in regulated environments.
• Deep knowledge of HIPAA/HITECH, SOC 2, HITRUST, NIST, ISO 27001.
• Hands-on cloud security governance across AWS/Azure/M365.
• Experience managing healthcare security/compliance audits.
• Strong IAM, encryption, DLP, and incident response knowledge.

Responsibilities

• Develop and execute a company-wide cybersecurity strategy.
• Architect security governance across AWS, Azure, and M365.
• Lead HIPAA, HITRUST, SOC 2, and related compliance efforts.
• Oversee audits, risk management, and audit readiness.
• Coordinate incident response, tabletop exercises, and DR/BC planning.
• Partner with leadership to translate risk into business actions.

Skills

Leadership

Strategic thinking

Communication

Cross-functional collaboration

Risk management

English fluency

Tools

AWS

Azure

M365

Purview

Job description

Confidential in Houston seeks a Director of Cybersecurity & Compliance to lead enterprise security strategy across AWS, Azure, and Microsoft 365. This leader will drive HIPAA/HITECH, SOC 2, HITRUST compliance and oversee audits, risk management, and incident response in a multi-state behavioral health context.

The role partners with Technology, Clinical, Operations, and executive teams to protect patient data, ensure scalable resilience, and align security controls with regulatory requirements.