Senior Director, Information Security

Prompt · Remote · Remote ·
Fully remoteFull-timeLead8+ years
COMPENSATION
$200k – $240k
0 applicants so far

Listed on the employer's job board (Ashby)

  • Senior leadership role
  • HIPAA Security Officer
  • Remote/hybrid setup
  • Healthcare SaaS focus
  • SOC 2 ownership

As Prompt scales its automated software for rehab therapy, maintaining customer trust is paramount. This leadership role owns the information security program, ensuring compliance with HIPAA/HITECH and SOC 2 while maturing security controls across the organization.

The position requires balancing technical depth with strategic governance. You will partner with engineering and business leaders to translate security requirements into sustainable processes, managing audits, policies, and incident response without handling daily implementation tasks.

What you'll do

  • Serve as designated HIPAA Security Officer and lead the information security program
  • Own SOC 2 Type II program, including audit readiness and remediation
  • Develop and govern the information security policy and control framework
  • Assess cloud architectures, CI/CD pipelines, and identity access models
  • Oversee vulnerability management and application security programs
  • Coordinate security incident response with legal and technical teams
  • Manage third-party risk, customer diligence, and security escalations
  • Establish secure SDLC and software supply chain requirements

What you'll need

  • 8+ years in information security, risk management, or compliance
  • Deep knowledge of HIPAA/HITECH and healthcare compliance
  • Experience leading SOC 2 Type II or similar certification programs
  • Strong understanding of cloud, application, and IAM security
  • Knowledge of AI security governance and sensitive data risks
  • Ability to translate technical risks into business impact
  • Experience building security governance and cross-functional accountability
  • Relevant certifications like CISSP or CISM are preferred

Stack

  • HIPAA
  • SOC 2
  • Cloud Security
  • IAM
  • CI/CD
  • SDLC

How you'll work

  • Remote or hybrid work environment
  • Flexible paid time off
  • Company-wide sponsored lunches
  • Access to HQ recovery suite with sauna and cold plunge

What you get

  • Competitive salary and potential equity compensation
  • Medical, dental, and vision insurance
  • Company-paid disability and life insurance
  • Paid family and medical leave
  • Discounted pet insurance
  • FSA/DCA and commuter benefits
  • 401k retirement plan
  • Credits for fitness classes or gym memberships