Leap

Senior Manager, Security & Compliance

Who can apply: Only open to applicants in: New York.
Location as listed by the employer: “US (Remote); New York City”
Apply on Leap's site ↗

Opens the employer's official application page.

Generate a CV for this job

A CV tailored to this job's requirements in one click — boosted with testimonials from people who know your work.

Generate my CV

About this role

Leap is hiring for a Senior Manager, Security & Compliance role (full-time). See the official posting for full details.

Requirements

  • 7+ years in healthcare information security, governance/risk/compliance (GRC), or IT audit, including directly owning at least one full SOC 2 Type II audit cycle.
  • Deep familiarity with security and compliance frameworks such as SOC 2, HIPAA, and HITRUST, and an audit- and GRC-first approach to building a program.
  • Experience building a security or compliance program from scratch, or owning one end to end as an early security hire at a startup or growth-stage company.
  • Hands-on experience completing security questionnaires and representing your company with enterprise or health plan security teams.
  • Working knowledge of the HIPAA Security and Privacy Rules and of handling patient health data (PHI) in B2B healthcare.
  • Enough technical depth in cloud infrastructure (GCP preferred) and modern data stacks to review controls and advise engineers through implementation. This isn’t a policy-only role.
  • Comfort staying deep in the details while making judgment calls that commit the company.

Summarized from the employer's posting — check the full posting for every requirement.