RemoteLeaf Logo
Log in Sign up

Compliance and Security Director

44 minutes ago
United States
Full-time
Executive
Compliance Manager
Cybersecurity
AWS Encryption HIPAA Penetration Testing
Apply Now
Bluesight

Bluesight

Bluesight is a Medication Intelligence™ company that provides RFID-enabled solutions for hospital pharmacies to optimize medication management and prevent drug diversion.

Pharmaceuticals
51-200
Founded 2011
$37M raised
View All Jobs 3

Description

  • Lead the SOC 2 compliance program, including annual audits and certification processes.
  • Own the risk register, annual risk assessments, vendor risk management, business continuity/disaster recovery, and policy lifecycle management.
  • Lead customer security reviews, including complex hospital security questionnaires, technical inquiries, and compliance-related contract questions.
  • Assess and document SOC 2 and HIPAA controls across AWS infrastructure, including access controls, logging, encryption, and shared-responsibility boundaries.
  • Partner with Engineering, IT, the CTO/Security Officer, and Security Engineering to validate controls and collect audit evidence.
  • Partner with IT on endpoint protection, IAM, and access reviews; own related audit evidence.
  • Implement and expand the compliance automation platform.
  • Conduct internal audits, deliver employee training, and advise teams on security and compliance.
  • Develop and communicate a forward-looking compliance strategy for healthcare data security and AI.
  • Document decisions and lead presentations and discussions with cross-functional stakeholders.

Requirements

  • Experience developing, implementing, and monitoring practices for SOC 2, HIPAA, NIST, or ISO compliance standards.
  • Familiarity with hospital security operations and the ability to represent security posture credibly to customers.
  • Working knowledge of cloud infrastructure and security, preferably AWS, including IAM, networks, encryption and key management, logging/monitoring, and shared-responsibility models.
  • Ability to interpret architecture diagrams and assess or challenge control claims.
  • Working knowledge of AI governance, such as NIST AI RMF or vendor AI risk, and interest in AI regulation.
  • Expertise in security best practices, risk treatment recommendations, and risk-acceptance escalation.
  • Strong knowledge of data protection, privacy, and compliance automation or GRC platforms such as Vanta or Drata.
  • Ability to communicate complex, critical information clearly to broad audiences.
  • Proactive, autonomous approach to completing ambiguous cross-functional work.
  • Must be located in the continental United States.

Benefits

  • Competitive salary.
  • Unlimited vacation time.
  • Generous insurance coverage.
  • 401(k) program with company match.
  • Opportunities for ownership, creativity, and professional growth in a collaborative culture.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

NASA Federal Credit Union

Regulatory Compliance Analyst (Banking)

NASA Federal Credit Union 201-500 Banks

NASA Federal Credit Union seeks a Regulatory Compliance Analyst to support and lead compliance initiatives, testing, and regulatory reviews across its financial institution operations.

Anywhere Full-time Mid Level Compliance Manager
$55k-$140k
29 minutes ago
NeoWork

Credentialing Specialist - Philippines

NeoWork 51-200 Professional Services

NeoWork is hiring a Philippines-based Credentialing Specialist to manage and verify healthcare provider qualifications, ensuring compliance with regulatory and organizational standards.

Philippines Full-time Junior Compliance Manager
12 hours, 59 minutes ago
Welo Global

Customs & Trade Compliance Subject Matter Expert (Mexico)

Welo Global Professional Services

Join a remote, part-time consulting project to apply Mexican customs and trade compliance expertise in developing and validating reference materials for AI-supported professional workflows.

Mexico Freelance Mid Level Compliance Manager
$25k-$25k
21 hours, 59 minutes ago
Welo Global

Especialista en Clasificación Arancelaria y Cumplimiento Aduanero (México)

Welo Global Professional Services

Únete como consultor independiente de comercio exterior para apoyar un proyecto remoto en México que documenta y valida decisiones de cumplimiento aduanero para sistemas de inteligencia artificial.

Mexico Freelance Mid Level Compliance Manager
$25k-$25k
23 hours, 59 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers