Manager of Security and Compliance
IntusCare · Remote · Remote-USA ·
COMPENSATION
€130k – €150k
Listed on the employer's job board (Ashby)
- Fully remote (US)
- HIPAA & HITRUST focus
- Healthcare SaaS
- Manager level
- No visa sponsorship
IntusCare provides an end-to-end technology ecosystem for PACE and coordinated care models. This role leads the execution and maturity of security, privacy, and healthcare compliance programs. You will partner with Engineering, Product, and IT to integrate security into the SDLC and manage audit readiness.
What you'll do
- Own security and compliance programs for HIPAA, SOC 2, and HITRUST
- Lead HITRUST certification from scoping to corrective action plans
- Manage internal and external audits, risk assessments, and penetration tests
- Direct external security partners and ensure remediation of findings
- Partner with Engineering to integrate security into architecture and AI development
- Oversee access management, encryption, logging, and vendor risk controls
- Lead security incident responses and post-incident reviews
- Maintain security policies, BAAs, and breach response plans
- Support customer security reviews and contract negotiations
- Establish metrics for risks, incidents, and audit readiness
- Lead security awareness training and mentor the compliance team
What you'll need
- 7+ years in information security, healthcare compliance, or risk management
- Strong knowledge of HIPAA, SOC 2, HITRUST, and privacy requirements
- Proven experience leading audits, risk assessments, and remediation
- Led at least one HITRUST certification end to end as accountable owner
- Practical understanding of cloud/SaaS security and incident response
- Experience partnering with Engineering and Product on security integration
- Experience with vendor risk management and third-party assessments
- Strong communication skills for technical and non-technical audiences
- Background in healthcare technology, EMRs, or clinical systems
Nice to have
- Experience with PACE, value-based care, or Medicare/Medicaid
- Background scaling security programs in growing SaaS companies
- Experience securing Azure and Kubernetes/AKS environments
- Knowledge of DevSecOps and security automation
- Experience leading small security or compliance teams
- Certifications such as CCSFP, CISSP, CISM, or HCISPP
Stack
- Azure
- Kubernetes
- AKS
How you'll work
- Fully remote within the United States
- No visa sponsorship available
What you get
- Base salary range of 130,000 to 150,000 USD