Information Security Program Manager

A company is looking for an Information Security Program Manager to lead its information security and regulatory compliance programs.

Key Responsibilities

Own and lead internal compliance and security programs, ensuring adherence to HIPAA, HITRUST, GDPR, SOC 2, and other regulatory frameworks

Collaborate with the Engineering team to integrate security and compliance requirements into product design and development

Manage all aspects of SOC 2 audits and serve as the primary coordinator for the Confidentiality & Security Team (CST)

Required Qualifications

8+ years of experience in compliance, information security, privacy, or risk management, preferably in healthcare or SaaS environments

CISSP certification strongly preferred or other advanced technical security certifications

Strong knowledge of industry frameworks and regulations such as HIPAA, SOC 2, CCPA, and GDPR

Experience leading external audits, certifications, or regulatory assessments

Excellent documentation, organizational, and program management skills