Director of Compliance and Security

4 days ago

Apply Now

Receive Emails with Similar Jobs

SubjectWell

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2012

⚕️ Healthcare Insurance

🧬 Biotechnology

💊 Pharmaceuticals

Description

• SubjectWell is looking for a Director of Compliance and Security to manage Vendor Assessments, Security Audits and ensure adherence to security principles. • Manage security and compliance questionnaires/audits and track compliance protocols including Privacy, GDPR, HIPAA/HiTrust. • Update the Executive Leadership team on risk areas and create a plan to address them. • Conduct internal audits and evaluate company controls to SOC standards. • Develop training, procedures and documentation for security and compliance initiatives.

Requirements

• Has managed Compliance, Privacy and Security for an organization as an individual or as part of managing a team that owned this as their primary responsibility. • 5+ or more years of experience working in a hands-on Compliance, Risk Management and/or Cybersecurity role. • Preferably 2 years of experience as a Compliance Manager or another supervisory role. • Knowledge of security standards and audit frameworks (e.g., SOC, ISO). • Strong understanding of information security and privacy standards and best practices related to data confidentiality. • In-depth knowledge of industry-relevant data security and compliance regulations such as SOC, ISO. • Expert level understanding of HIPAA, GDPR and other privacy/compliance regulations and/or frameworks. • Experience in risk assessment processes, policy development, proposals, work statements, product evaluations, and delivery of technology. • Familiarity with information security and data privacy standards and guidelines. • Ability to understand and interpret laws and regulatory requirements related to information protection; develop and implement appropriate processes to achieve and maintain compliance and reduce risk. • Excellent analytical, data visualization, and communication skills. • CISSP or IAPP certifications and/or advanced degree will be considered a plus.