Security Governance Program Manager

Candidates must possess a BS degree in computing, information security, or a related field, or 5+ years of information security GRC or audit experience. Strong experience implementing and maintaining a HITRUST r2 program is required, along with working knowledge of healthcare industry security and privacy regulations like HIPAA and HITECH. Experience with SOC 2, ISO 27001, and NIST security frameworks is necessary, and prior experience supporting security in healthcare companies is preferred. Experience with compliance automation tools is a plus. Candidates should be highly organized, motivated, capable of working independently, and possess excellent communication skills to translate complex compliance requirements for various audiences. Industry certifications such as CRISC, CISA, CISM, or ISO 27001 Lead Auditor are preferred.