Director, Security & Privacy (HIPAA Privacy & Security, HITECH Act requirements)

Experteer Overview In this role you lead HCUS’s security and privacy programs, advising executives on security posture for products, cloud services, and customer-facing systems handling PHI. You will drive policy, risk management, and regulatory readiness, coordinating cross-functionally across HCUS, HLUS, and FTYO to enable compliant, secure operations. You’ll oversee HIPAA privacy and security activities and govern a risk-based security program that scales with company growth. This position offers a meaningful chance to shape enterprise security and privacy at a healthcare innovator. Compensation / Benefits * Lead HIPAA Security Officer and HIPAA Privacy Officer responsibilities * Develop, implement, and maintain information security and privacy programs and governance * Oversee risk assessments, remediation tracking, and third-party risk management * Manage SOC 2 readiness, audits, and evidence management * Coordinate incident response and breach management, including post-incident review * Oversee security architecture for cloud, applications, and data; promote secure SDLC practices * Foster security and privacy awareness and training across HCUS Tasks * Bachelor’s degree in a related field; equivalent experience considered * 7+ years in information security, privacy, or risk management * 3+ years leading security/privacy programs * Experience with HIPAA Privacy Rule and Security Rule, HITECH, and breach response * SOC 2 readiness and audit experience * Risk assessments and remediation management * Knowledge of common security frameworks (NIST, ISO, SOC 2) and cloud security Key requirements * Medical, Dental, Vision * Life Insurance * 401K * Paid Time Off

you review * Oversee security architecture for cloud, applications, and data; promote secure SDLC practices * Foster security and privacy awareness and training across HCUS Tasks * Bachelor’s degree in a related field; equivalent experience considered * 7+ years in information security, privacy, or risk management * 3+ years leading security/privacy programs * Experience with HIPAA Privacy Rule and Security Rule, HITECH, and breach response * SOC 2 readiness and audit experience * Risk assessments and remediation management * Knowledge of common security frameworks (NIST, ISO, SOC 2) and cloud security Key requirements * Medical, Dental, Vision * Life Insurance * 401K * Paid Time Off