Healthcare Security & HIPAA Compliance Specialist

About the role

This role focuses on designing, implementing, and maintaining security and compliance programs aligned with HIPAA and other healthcare regulations. The specialist will work closely with IT, clinical, and operations teams to ensure secure handling of protected health information.

Key responsibilities

• Assess existing security controls and conduct risk and gap analyses.
• Recommend technical and procedural safeguards for protected health information.
• Develop and update policies, procedures, and training materials.
• Collaborate with cross‑functional teams to ensure secure data handling and incident response readiness.
• Perform compliance audits, support remediation activities, and prepare reports for internal stakeholders and external regulators.

Required profile

• Knowledge of healthcare and clinical workflows, including handling of protected health information.
• EMT or other healthcare training background.
• Strong communication skills to explain security and compliance requirements to technical and non‑technical audiences.
• Experience delivering HIPAA, security awareness, and healthcare compliance training.
• Demonstrated experience in healthcare security, HIPAA compliance, and related regulatory frameworks (e.g., HITECH, NIST, HITRUST).
• Relevant certifications (e.g., HCISPP, CISSP, CISM, CHPS) and a degree in information security, healthcare administration, IT, or related field are preferred.

Required skills

• Cybersecurity principles, risk management, access control, encryption, incident response.
• Regulatory frameworks: HIPAA, HITECH, NIST, HITRUST.
• Policy and procedure development.
• Training and awareness program delivery.