Healthcare Compliance & Security Specialist

About the role

The Healthcare Compliance and Security Specialist ensures that the organization meets healthcare regulatory requirements and security standards. Working closely with product, engineering, DevOps, and operations teams, the specialist implements best‑practice security controls and monitors ongoing compliance.

Key responsibilities

• Maintain compliance with HIPAA, ISO 27001 and other relevant healthcare regulations.
• Support internal and external audits, and assist with certification processes.
• Conduct security risk assessments and propose mitigation plans.
• Identify, track, and remediate vulnerabilities across systems.
• Maintain up‑to‑date security policies, procedures, and audit evidence.
• Coordinate vendor risk assessments and third‑party security reviews.
• Collaborate with Engineering and DevOps to embed secure development practices.
• Assist in incident investigation, root‑cause analysis, and access‑review processes.
• Deliver security awareness training and manage compliance documentation.
• Prepare responses to customer security questionnaires and generate compliance metrics.

Required profile

• Strong knowledge of healthcare compliance frameworks such as HIPAA and ISO 27001.
• Solid understanding of cybersecurity fundamentals and information‑security best practices.
• Excellent collaboration and communication skills across technical and non‑technical teams.
• Ability to work independently without direct team management responsibilities.

Required skills

• HIPAA compliance
• ISO 27001 implementation
• Risk assessment
• Vulnerability management
• Incident response
• Security policy development
• Security audit support