Senior Security & Compliance - Healthcare Consultant | Zenara Health
RemotePart-timeSenior levelPosted 2 weeks ago
Senior legal part-time role at Zenara Health. Remote.
About the role
We are looking for a Senior Security & Compliance Lead to build and own Zenara’s security and compliance program. You will set risk priorities, define security and HIPAA-related controls, verify that they work, and lead our responses to customer security reviews. You will work closely with the Head of Engineering and our Platform Engineer, who owns day-to-day platform operations and implements and operates many of the technical controls.
What you'll do
- Own the security and compliance roadmap, including risk prioritization, remediation tracking, and follow-through
- Establish and maintain HIPAA-related policies, procedures, control requirements, and supporting evidence
- Review cloud infrastructure, access controls, secrets management, and other technical safeguards with the Platform Engineer
- Define what technical controls must achieve; partner with the Platform Engineer to implement and operate them; independently verify their effectiveness
- Review patient-data flows, vendors, AI tools, and LLM-related data risks
What you need
- Compliance
- Incident response
- Azure
- Kubernetes
- LLMs