Security & Compliance Manager (Healthcare) - Remote

Overview

The Security & Compliance Manager at Sully.ai will be responsible for ensuring the security and compliance of healthcare-related AI solutions, focusing on frameworks such as SOC 2, ISO 27001, and HIPAA.

In Short

• Own controls across SOC 2 Type II, ISO 27001, and HIPAA.
• Manage identity & access lifecycle across multiple platforms.
• Triage security engineering work with engineering leads.
• Prepare for and host audits.
• Handle customer trust work including security reviews and RFPs.
• Coordinate monitoring runbooks and lead control-health reviews.
• Champion security-by-default in AI pipelines.
• Manage vendor relationships.

Requirements

• 5+ years in Security GRC / SecOps / IT with healthcare exposure.
• Knowledge of HIPAA/HITECH and PHI data flows.
• Experience with multi-cloud IAM and compliance automation.
• Strong program/project management skills.
• Basic scripting skills in Python/Bash and SQL.

Benefits

• Shape the future of healthcare technology.
• Join an early-stage team with significant impact.
• Enjoy a remote-first culture and flexible working environment.
• Receive competitive compensation and equity.
• Work on complex scalability challenges.