Leap
Leap
Leap — өзін-өзі қаржыландыратын жұмыс берушілер, брокерлер, кеңесшілер және пациенттер үшін мамандандырылған инфузиялық емдеу артықшылықтарын ашық әрі басқаруға ыңғайлы етуге бағытталған денсаулық сақтау компаниясы. Оның технологияға негізделген күтім моделі дәріханадан дәрі-дәрмек жеткізуді және үйде көрсетілетін мейіргерлік көмекті қоса алғанда, инфузиялық емдеудің бүкіл үдерісін үйлестіреді әрі дәрі бағасына қосылатын жасырын үстемелерді жояды. Шығындарды бақылауды пациенттерді қолдаумен ұштастыра отырып, Leap мамандандырылған инфузиялық көмекті жеңілдетуге және құны жоғары емдеуге жұмсалатын шығындарды азайтуға көмектеседі.

Senior Manager, Security & Compliance (Remote - New York)

Lead Leap’s HITRUST, SOC 2, and HIPAA programs for its employer-focused specialty pharmacy benefits platform. Own audits, controls, risk assessments, and security relationships.

Сипаттама

  • Drive HITRUST certification from initial planning through completion, covering gap analysis, control mapping, remediation, and assessor coordination.
  • Manage the full SOC 2 Type II audit lifecycle, including evidence gathering, auditor coordination, and resolving identified gaps.
  • Oversee HIPAA security and privacy controls, foundational policies, and business associate agreement obligations.
  • Evaluate Leap’s security posture and create a prioritized roadmap for improvements and security tooling.
  • Implement security controls, policies, and operational processes throughout the organization.
  • Work with Engineering to implement security measures across GCP and the data stack.
  • Evaluate prospective vendors and tools, including AI-enabled solutions.
  • Conduct recurring third-party risk assessments.
  • Complete security questionnaires, security sections of RFPs, and control evaluations.
  • Identify security requirements in client and partner contracts.
  • Create a reusable response library and standardized review workflow.
  • Represent Leap in discussions with client and partner security teams.
  • Choose and oversee the external security partner.
  • Provide leadership with updates on security posture, risk, and compliance progress.
  • Identify areas requiring additional security investment.

Талаптар

  • At least seven years of experience in healthcare information security, GRC, or IT audit.
  • Experience independently managing at least one complete SOC 2 Type II audit cycle.
  • Strong knowledge of SOC 2, HIPAA, and HITRUST frameworks.
  • Experience creating a security or compliance program from the ground up, or managing one end to end as an early security hire in a startup or growth-stage organization.
  • Practical experience completing security questionnaires and representing an organization to enterprise or health plan security teams.
  • Working knowledge of the HIPAA Security and Privacy Rules.
  • Experience managing protected health information in a B2B healthcare environment.
  • Strong technical understanding of cloud infrastructure; GCP experience is preferred.
  • Familiarity with modern data stack technologies.
  • Ability to evaluate controls and guide engineers through implementation.
  • Confidence making security judgments that establish company commitments.
  • Hands-on HITRUST certification experience is a plus.
  • Experience in health technology, digital health, or employee benefits is a plus.
  • Experience working with health plans and large self-funded employers is a plus.
  • ISO 27001 experience is a plus.
  • Experience with Vanta, Drata, or Secureframe is a plus.
  • CISSP, CISA, CISM, or CRISC certification is a plus.

Артықшылықтар

  • Equity or stock options.
  • Competitive total rewards package.
  • Benefits package.
  • Equal opportunity employer committed to a diversity of perspectives, experiences, and identities.
  • Candidates may submit up to three applications within any 90-day period.
  • Candidates not selected for an offer may reapply for the same role after 60 days.

Ұқсас жұмыс орындары

Hewlett Packard Enterprise

Executive Assistant, Dallas Hybrid

Hewlett Packard Enterprise

Support Hewlett Packard Enterprise executives with calendars, presentations, travel, and budgets. Coordinate strategic administrative operations in a hybrid Texas role.

Ашу
GlobeLife

Remote Customer Retention Representative

GlobeLife

Help Globe Life policyholders keep their coverage and restore lapsed life insurance policies in this remote customer retention role. Handle inbound and outbound calls, discuss coverage and payment options, document outcomes, and meet retention targets.

Ашу
Bundesverbraucherhilfe e.V.

Editor-in-Chief, Federal Consumer Bulletin (Volunteer)

Bundesverbraucherhilfe e.V.

Lead the volunteer editorial team behind Bundesverbraucherhilfe’s daily consumer news bulletin. Oversee journalistic standards, editorial independence, coverage, and team development.

Ашу
Our National Conversation (ONC)

Remote Editorial Lead Intern (California)

Our National Conversation (ONC)
51 – 200 Қызметкерлер
B2CКоммерциялық емесМедиа

Lead writers, publication schedules, and editorial standards as an intern with Our National Conversation. Support its mission to reduce partisanship and promote solutions through youth-driven media.

Ашу
CB Talents Academy

Dutch-Speaking Customer Support Specialist (Remote, Portugal)

CB Talents Academy
1 – 10 Қызметкерлер
Білім беру

Support users of a global online payment platform in Dutch, handling payment questions, collections, assistance for vulnerable customers, and account administration remotely from Portugal.

Ашу
I

Senior Engineering Manager, Risk Engineering

Imprint
201 – 500 Қызметкерлер
КонсалтингҚаржыМаркетинг

Lead backend teams responsible for real-time payment authorization, fraud decisions, and underwriting at Imprint, an embedded payments and credit platform.

Ашу
Martin & Company

Director of P&C Insurance Consulting

Martin & Company

Lead client-facing property and casualty insurance consulting engagements at Martin & Company, a technology-enabled insurance advisory firm. Shape project scope, protect delivery quality, grow client accounts, and mentor consultants.

Ашу
Commonwealth Bank
General Dynamics Information Technology

Vice President and General Manager, Navy and Marine Corps

General Dynamics Information Technology

Lead GDIT’s Navy and Marine Corps technology services portfolio, with annual revenue above $700 million. Set business strategy, oversee financial performance and delivery, and drive growth across defense programs.

Ашу