SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 130,000 - 150,000 / annual
IntusCare is seeking a Manager of Security and Compliance to lead the day-to-day execution and maturity of the company's security, privacy, and healthcare compliance program. This role owns key compliance programs, security governance, risk management, audit readiness, and incident response while partnering closely with Engineering, Product, SRE, IT, Legal, and customer-facing teams.
Key responsibilities include owning and continuously improving security and compliance programs across HIPAA, SOC 2, HITRUST, and applicable privacy requirements. The manager will lead IntusCare's HITRUST certification end-to-end, including scoping, readiness assessment, evidence collection, assessor coordination, and corrective action plans. The role involves leading internal and external audits, risk assessments, security reviews, penetration tests, and remediation efforts, with a focus on moving from point-in-time evidence collection toward continuous, system-generated compliance.
The manager will manage external security and compliance partners, including advisory firms, HITRUST assessors, and penetration testers, directing their scope and priorities while ensuring findings translate into owned remediation. Additional responsibilities include maintaining the security and compliance roadmap, partnering with technical teams to integrate security into architecture and product development, overseeing critical controls (access management, logging, encryption, vulnerability management, data retention, vendor risk), and leading security incident responses.
The role requires maintaining security policies, procedures, Business Associate Agreements, data handling requirements, and breach response plans. The manager serves as the day-to-day lead for HIPAA Security Rule obligations, supports customer security reviews and due diligence, establishes security metrics for leadership visibility, and leads security awareness training while managing and mentoring the security and compliance team.
IntusCare is the only end-to-end ecosystem built specifically for Programs of All-Inclusive Care for the Elderly (PACE) programs, replacing outdated technology with purpose-built solutions for care coordination, risk adjustment, population health, and utilization management.
REQUIREMENTS:
- 7+ years of experience in information security, healthcare compliance, privacy, or risk management, preferably within healthcare SaaS or health technology
- Strong knowledge of HIPAA, SOC 2, HITRUST, healthcare privacy requirements, and security control frameworks
- Proven experience leading audits, risk assessments, compliance programs, and remediation activities, including directing external advisors and assessors
- Proven experience leading at least one HITRUST certification (i1 or r2) end-to-end as the accountable owner, including scoping, evidence collection, assessor management, and corrective action plans
- Practical understanding of cloud/SaaS security, identity and access management, vulnerability management, encryption, logging, data protection, and incident response
- Experience partnering with Engineering and Product teams to incorporate security into technology and development processes
- Experience with vendor risk management and third-party security assessments
- Strong communication skills with the ability to translate security and regulatory requirements for technical and non-technical audiences
- Experience working with healthcare technology, EMRs, clinical systems, or healthcare data environments
PREFERRED QUALIFICATIONS:
- Experience with PACE, value-based care, Medicare/Medicaid, or regulated healthcare environments
- Experience building or scaling security and compliance programs in a growing SaaS company
- Experience securing cloud-native environments (Azure and Kubernetes/AKS preferred), including DevSecOps and security automation
- Experience leading a small security/compliance team or cross-functional security initiatives
- Relevant certifications such as CCSFP, CISSP, CISM, or HCISPP
