rater8

Senior Security and Compliance Lead

United States - Remote · Senior

Work authorization required$145k-$185kDetected 6 days ago

AWSGCPAzureCloud PlatformsCI/CDCybersecurityNetwork SecuritySOC OperationsIncident ResponseComplianceHIPAALeadershipCommunicationCISSP

About the role

The role combines hands-on technical leadership with executive-level program management.
Responsible for establishing and maintaining the organization's IT governance framework, risk management methodologies, and cybersecurity compliance programs.

Define and own the multi-year information security strategy and roadmap aligned to business objectives.
Build, mentor, and lead the security and compliance team, including security engineers, analysts, and GRC (governance, risk management, and compliance) staff.
Manage the security and compliance budget, vendor relationships, and tooling investments.
Own the enterprise risk management program: identify, assess, prioritize, and track remediation of security risks.
Lead audit readiness and certification efforts (e.g., SOC 2 Type II, ISO 27001, HIPAA, HITRUST, GDPR, CCPA).
Develop, maintain, and enforce security policies, standards, and procedures.
Manage relationships with external auditors, assessors, and regulators
Partner with other functions on data privacy obligations, breach notification readiness, and cross-functional compliance matters.
Manage relationships with external auditors, assessors, and regulators; coordinate evidence collection and remediation.
Own the incident response program - preparation, detection, containment, eradication, recovery, and post-incident review.

We are 100% fully remote! Work from anywhere in the U.S. with reliable Wi-Fi, within PST-EST time zones. Employees must be physically located in the U.S.
We are 100% fully remote! Work from anywhere in the U.S. with reliable Wi-Fi, within PST-EST time zones. Employees must be physically located in the U.S.; working outside the U.S. requires prior approval from leadership.
Employees must be physically located in the U.S.; working outside the U.S. requires prior approval from leadership.

Familiarity with infrastructure-as-code and securing CI/CD pipelines.
Master's degree in a relevant field.
coordinate evidence collection and remediation.
Oversee third-party and vendor risk management and customer security questionnaire responses.
Direct security operations, including monitoring, detection, vulnerability management, and patching.
Oversee identity and access management, encryption, network security, and cloud security posture management.
Foster a "security is everyone's responsibility" culture - serve as the internal champion and go-to escalation point for security matters.
Other Duties as Assigned

The expected salary range for this position is $145,000 - $185,000 annually.
Actual compensation will be based on a candidate's skills, qualifications, and years of relevant experience.
In addition to the base salary, this role offers a bonus 10%, an opportunity, OTE of $159,000 - $203,500.
Bonus compensation will depend on individual performance and company performance.
Competitive salary

Medical, dental, and vision benefits
Unlimited PTO after 60 days of employment
rater8 is a "bring your own device" company, enabling you to work on your preferred operating system; we offer a WFH stipend to offset costs per company guidelines
rater8, the healthcare industry's leader in reputation management, helps medical practices establish pervasive online visibility.

Act as a calm, credible communicator during security events, translating technical risk into clear business language for executives, customers, and the board.
Fast-track career advancement with a high-growth, Great Place to Work™ certified organization
We are 100% fully remote!

Must reside in the continental U.S., be authorized to work without sponsorship, and not reside in California.

This listing is sourced directly from rater8's careers page and normalized into a canonical job model.