Senior Director, Security & Compliance

Responsibilities

• ▹Lead the compliance and information security programs as Compliance Officer and HIPAA Security Officer
• ▹Own HIPAA/HITECH compliance, including the Security Risk Analysis and risk-management plan
• ▹Be accountable for SOC 2 Type II and other certifications, audit readiness and remediation
• ▹Own the compliance and security policy framework
• ▹Establish clear ownership for controls and track deficiencies and remediation plans
• ▹Partner with Engineering, DevOps and IT leaders to evaluate technical controls
• ▹Own the security incident-response framework
• ▹Lead security and compliance aspects of third-party risk management, customer diligence, audits and RFPs/RFIs
• ▹Establish governance for emerging technologies and use of sensitive data with Product, AI and Legal

Requirements

• ▹8+ years of experience in compliance, information security, risk management or related disciplines, including meaningful leadership responsibility

Soft skills

About the company

Prompt delivers highly automated, modern software to rehab therapy businesses, their teams and their patients. One of the fastest-growing healthcare SaaS companies.