Security and Compliance Manager at Rezilient

Setup: Remote
Type: Full-time
Posted: Apr 28, 2026

Description

Rezilient is seeking a Security and Compliance Manager to join their growing team. The successful candidate will be responsible for overseeing the company's security governance, risk, and compliance (GRC) functions, including the operationalization of frameworks like SOC 2, HIPAA/HITECH, and HITRUST, as well as policy maintenance, audits, and vendor compliance. This role acts as a crucial cross-functional liaison between security, product, engineering, clinical operations, and IT, embedding security and compliance into all aspects of product development, care delivery, and internal systems.

Required Skills

security governance
risk assessment
compliance review
third-party risk management
incident response
enterprise risk register
security awareness training
product lifecycle integration
secure development practices
data protection requirements
threat modeling
device management
endpoint security

Additional Information

Required Previous Experiences: 5–10 years of experience in security/compliance in healthcare, digital health, or SaaS/cloud environments
Preferred Qualifications: Strong familiarity with frameworks such as SOC 2, HITRUST, HIPAA/HITECH, ISO 27001/27002, NIST CSF.
Experience working cross-functionally with engineering, product, IT, and clinical/operational teams.
Hands-on experience with audits, external assessors, and certification processes.
Strong knowledge of third-party risk management, incident response, and security governance.
Excellent communication skills with the ability to translate technical and compliance risks into business impact.
Relevant certifications (CISSP, CISM, CISA, CRISC) strongly preferred.