LogoFresh Jobs Ahead
Leap
Leap
11 – 50 Angajați
Sponsor pentru viza H1BAsigurăriAsistență medicalăConsultanță
Leap este o companie de servicii medicale axată pe creșterea transparenței și simplificarea gestionării beneficiilor pentru perfuzii specializate destinate angajatorilor care își autofinanțează planurile, brokerilor, consultanților și pacienților. Modelul său de îngrijire bazat pe tehnologie coordonează întregul parcurs al perfuziei, inclusiv aprovizionarea cu medicamente prin farmacii și îngrijirea medicală la domiciliu, eliminând în același timp adaosurile ascunse la prețul medicamentelor. Prin combinarea monitorizării costurilor cu sprijinul pacienților, Leap contribuie la simplificarea îngrijirii prin perfuzii specializate și la reducerea cheltuielilor pentru tratamentele costisitoare.
LinkedIn
Locurile de muncă ale companiei

Senior Manager, Security & Compliance (Remote - New York)

Lead Leap’s HITRUST, SOC 2, and HIPAA programs for its employer-focused specialty pharmacy benefits platform. Own audits, controls, risk assessments, and security relationships.

USStatele Unite ale AmericiiNYNew York
150.000 $ – 190.000 $ / an
RemoteNormă întreagăSeniorLimbă Obligatorie: englezăConformitate
CloudGoogle Cloud Platform

Descriere

  • Drive HITRUST certification from initial planning through completion, covering gap analysis, control mapping, remediation, and assessor coordination.
  • Manage the full SOC 2 Type II audit lifecycle, including evidence gathering, auditor coordination, and resolving identified gaps.
  • Oversee HIPAA security and privacy controls, foundational policies, and business associate agreement obligations.
  • Evaluate Leap’s security posture and create a prioritized roadmap for improvements and security tooling.
  • Implement security controls, policies, and operational processes throughout the organization.
  • Work with Engineering to implement security measures across GCP and the data stack.
  • Evaluate prospective vendors and tools, including AI-enabled solutions.
  • Conduct recurring third-party risk assessments.
  • Complete security questionnaires, security sections of RFPs, and control evaluations.
  • Identify security requirements in client and partner contracts.
  • Create a reusable response library and standardized review workflow.
  • Represent Leap in discussions with client and partner security teams.
  • Choose and oversee the external security partner.
  • Provide leadership with updates on security posture, risk, and compliance progress.
  • Identify areas requiring additional security investment.

Cerințe

  • At least seven years of experience in healthcare information security, GRC, or IT audit.
  • Experience independently managing at least one complete SOC 2 Type II audit cycle.
  • Strong knowledge of SOC 2, HIPAA, and HITRUST frameworks.
  • Experience creating a security or compliance program from the ground up, or managing one end to end as an early security hire in a startup or growth-stage organization.
  • Practical experience completing security questionnaires and representing an organization to enterprise or health plan security teams.
  • Working knowledge of the HIPAA Security and Privacy Rules.
  • Experience managing protected health information in a B2B healthcare environment.
  • Strong technical understanding of cloud infrastructure; GCP experience is preferred.
  • Familiarity with modern data stack technologies.
  • Ability to evaluate controls and guide engineers through implementation.
  • Confidence making security judgments that establish company commitments.
  • Hands-on HITRUST certification experience is a plus.
  • Experience in health technology, digital health, or employee benefits is a plus.
  • Experience working with health plans and large self-funded employers is a plus.
  • ISO 27001 experience is a plus.
  • Experience with Vanta, Drata, or Secureframe is a plus.
  • CISSP, CISA, CISM, or CRISC certification is a plus.

Beneficii

  • Equity or stock options.
  • Competitive total rewards package.
  • Benefits package.
  • Equal opportunity employer committed to a diversity of perspectives, experiences, and identities.
  • Candidates may submit up to three applications within any 90-day period.
  • Candidates not selected for an offer may reapply for the same role after 60 days.

Locuri de muncă similare

NVIDIA

NVIDIA Senior Manager, Rack-Scale Systems Software Engineering

NVIDIA
Sponsor pentru viza H1BAsistență medicalăIndustria prelucrătoareInteligență artificială
USStatele Unite ale AmericiiCACaliforniaWAWashington
248.000 $ – 391.000 $ / an
La sediuNormă întreagăSeniorLimbă Obligatorie: englezăManager de inginerie
C++GoKubernetesLinuxPythonRustSisteme distribuite

Lead NVIDIA’s engineering team building rack-scale infrastructure software for AI computing systems. Drive control planes, lifecycle orchestration, reliability, and delivery across teams.

Deschide