Leap
Leap
Leap is a healthcare company focused on making specialty infusion benefits more transparent and manageable for self-funded employers, brokers, consultants, and patients. Its technology-enabled care model coordinates the full infusion journey, including pharmacy sourcing and in-home nursing, while removing hidden drug markups. By combining cost oversight with patient support, Leap helps simplify specialty infusion care and reduce spending on high-cost treatments.

Senior Manager, Security & Compliance (Remote - New York)

Lead Leap’s HITRUST, SOC 2, and HIPAA programs for its employer-focused specialty pharmacy benefits platform. Own audits, controls, risk assessments, and security relationships.

Description

  • Drive HITRUST certification from initial planning through completion, covering gap analysis, control mapping, remediation, and assessor coordination.
  • Manage the full SOC 2 Type II audit lifecycle, including evidence gathering, auditor coordination, and resolving identified gaps.
  • Oversee HIPAA security and privacy controls, foundational policies, and business associate agreement obligations.
  • Evaluate Leap’s security posture and create a prioritized roadmap for improvements and security tooling.
  • Implement security controls, policies, and operational processes throughout the organization.
  • Work with Engineering to implement security measures across GCP and the data stack.
  • Evaluate prospective vendors and tools, including AI-enabled solutions.
  • Conduct recurring third-party risk assessments.
  • Complete security questionnaires, security sections of RFPs, and control evaluations.
  • Identify security requirements in client and partner contracts.
  • Create a reusable response library and standardized review workflow.
  • Represent Leap in discussions with client and partner security teams.
  • Choose and oversee the external security partner.
  • Provide leadership with updates on security posture, risk, and compliance progress.
  • Identify areas requiring additional security investment.

Requirements

  • At least seven years of experience in healthcare information security, GRC, or IT audit.
  • Experience independently managing at least one complete SOC 2 Type II audit cycle.
  • Strong knowledge of SOC 2, HIPAA, and HITRUST frameworks.
  • Experience creating a security or compliance program from the ground up, or managing one end to end as an early security hire in a startup or growth-stage organization.
  • Practical experience completing security questionnaires and representing an organization to enterprise or health plan security teams.
  • Working knowledge of the HIPAA Security and Privacy Rules.
  • Experience managing protected health information in a B2B healthcare environment.
  • Strong technical understanding of cloud infrastructure; GCP experience is preferred.
  • Familiarity with modern data stack technologies.
  • Ability to evaluate controls and guide engineers through implementation.
  • Confidence making security judgments that establish company commitments.
  • Hands-on HITRUST certification experience is a plus.
  • Experience in health technology, digital health, or employee benefits is a plus.
  • Experience working with health plans and large self-funded employers is a plus.
  • ISO 27001 experience is a plus.
  • Experience with Vanta, Drata, or Secureframe is a plus.
  • CISSP, CISA, CISM, or CRISC certification is a plus.

Benefits

  • Equity or stock options.
  • Competitive total rewards package.
  • Benefits package.
  • Equal opportunity employer committed to a diversity of perspectives, experiences, and identities.
  • Candidates may submit up to three applications within any 90-day period.
  • Candidates not selected for an offer may reapply for the same role after 60 days.

Related Jobs

MÜNZING CHEMIE GmbH

Sales Manager, Mid-Atlantic Specialty Chemicals

MÜNZING CHEMIE GmbH
501 – 1,000 Employees
ChemistryManufacturing

Lead technical sales of specialty chemical additives across the Mid-Atlantic, serving customers in coatings, adhesives, inks, and construction. Manage existing accounts while developing new business through customer visits and project-based selling.

Open
MÜNZING

MÜNZING Mid-Atlantic Sales Manager, Specialty Chemicals

MÜNZING

Lead territory sales for MÜNZING’s specialty chemical additives across the Mid-Atlantic, using technical project selling to develop customer relationships and close business. Manage a $3–5 million territory and build $1–2 million in near-term business potential across coatings, adhesives, inks, and construction markets.

Open