Leap
Leap
Leap o‘z mablag‘i hisobidan sog‘liqni saqlash xarajatlarini qoplaydigan ish beruvchilar, brokerlar, maslahatchilar va bemorlar uchun maxsus infuziya xizmatlari bo‘yicha imtiyozlarni yanada shaffof va boshqarish oson bo‘lishiga e’tibor qaratadigan tibbiyot kompaniyasidir. Uning texnologiyaga asoslangan tibbiy xizmat modeli dori vositalarini dorixonalardan xarid qilish va uyda hamshiralik yordamini o‘z ichiga olgan holda, infuziya jarayonining barcha bosqichlarini muvofiqlashtiradi hamda dori narxlariga qo‘shiladigan yashirin ustamalarni bekor qiladi. Xarajatlarni nazorat qilishni bemorlarni qo‘llab-quvvatlash bilan birlashtirgan Leap maxsus infuziya xizmatlarini soddalashtirishga va qimmat davolash usullariga sarflanadigan xarajatlarni kamaytirishga yordam beradi.

Senior Manager, Security & Compliance (Remote - New York)

Lead Leap’s HITRUST, SOC 2, and HIPAA programs for its employer-focused specialty pharmacy benefits platform. Own audits, controls, risk assessments, and security relationships.

Tavsif

  • Drive HITRUST certification from initial planning through completion, covering gap analysis, control mapping, remediation, and assessor coordination.
  • Manage the full SOC 2 Type II audit lifecycle, including evidence gathering, auditor coordination, and resolving identified gaps.
  • Oversee HIPAA security and privacy controls, foundational policies, and business associate agreement obligations.
  • Evaluate Leap’s security posture and create a prioritized roadmap for improvements and security tooling.
  • Implement security controls, policies, and operational processes throughout the organization.
  • Work with Engineering to implement security measures across GCP and the data stack.
  • Evaluate prospective vendors and tools, including AI-enabled solutions.
  • Conduct recurring third-party risk assessments.
  • Complete security questionnaires, security sections of RFPs, and control evaluations.
  • Identify security requirements in client and partner contracts.
  • Create a reusable response library and standardized review workflow.
  • Represent Leap in discussions with client and partner security teams.
  • Choose and oversee the external security partner.
  • Provide leadership with updates on security posture, risk, and compliance progress.
  • Identify areas requiring additional security investment.

Talablar

  • At least seven years of experience in healthcare information security, GRC, or IT audit.
  • Experience independently managing at least one complete SOC 2 Type II audit cycle.
  • Strong knowledge of SOC 2, HIPAA, and HITRUST frameworks.
  • Experience creating a security or compliance program from the ground up, or managing one end to end as an early security hire in a startup or growth-stage organization.
  • Practical experience completing security questionnaires and representing an organization to enterprise or health plan security teams.
  • Working knowledge of the HIPAA Security and Privacy Rules.
  • Experience managing protected health information in a B2B healthcare environment.
  • Strong technical understanding of cloud infrastructure; GCP experience is preferred.
  • Familiarity with modern data stack technologies.
  • Ability to evaluate controls and guide engineers through implementation.
  • Confidence making security judgments that establish company commitments.
  • Hands-on HITRUST certification experience is a plus.
  • Experience in health technology, digital health, or employee benefits is a plus.
  • Experience working with health plans and large self-funded employers is a plus.
  • ISO 27001 experience is a plus.
  • Experience with Vanta, Drata, or Secureframe is a plus.
  • CISSP, CISA, CISM, or CRISC certification is a plus.

Imtiyozlar

  • Equity or stock options.
  • Competitive total rewards package.
  • Benefits package.
  • Equal opportunity employer committed to a diversity of perspectives, experiences, and identities.
  • Candidates may submit up to three applications within any 90-day period.
  • Candidates not selected for an offer may reapply for the same role after 60 days.

O‘xshash ish o‘rinlari

Kreato Global | BPO and Language Solutions

Remote English-Spanish OPI/VRI Interpreter

Kreato Global | BPO and Language Solutions

Interpret remotely between English- and Spanish-speaking people in medical, financial, social service, and customer care settings. Provide language support for Kreato Global across Latin America.

Ochish
RecruitGo

Remote Executive Assistant, Outreach and Marketing — Philippines

RecruitGo
51 – 200 Xodimlar
KonsaltingLogistikaMarketing

Handle administrative support, CRM, outreach, and marketing for RecruitGo, an Employer of Record serving global clients with talent from emerging markets. Support two UK-facing clients with day-to-day administration and creative campaigns.

Ochish