Employer description & source details
We are looking for a Senior Security & Compliance Lead to build and own Zenara’s security and compliance program. You will set risk priorities, define security and HIPAA-related controls, verify that they work, and lead our responses to customer security reviews. You will work closely with the Head of Engineering and our Platform Engineer, who owns day-to-day platform operations and implements and operates many of the technical controls. You own the program’s direction and outcomes. The Platform Engineer owns the day-to-day operation of the platform. You will work together to turn security requirements into working practices, not just documents. Here is the test: can you inspect a real technical environment, identify the risks that matter most, explain the trade-offs, and work with engineers to implement and verify effective controls? We are not looking for someone who only produces compliance paperwork. We need a leader with healthcare security judgment, technical depth, and the willingness to remain involved until a control actually works. Security and compliance should be part of how Zenara operates every day—not a last-minute exercise when a customer sends a questionnaire. You will build a program with clear control owners, practical policies, current evidence, tracked remediation, and tested response procedures. It should give engineering a safe path to move quickly while helping us protect patient data and answer customer questions with confidence. HIPAA-related safeguards, policies, and evidence Security risk assessment and remediation priorities Technical control standards and verification Patient-data flows and access controls Customer security reviews and audit preparation Incident response and escalation procedures Security practices for AI-assisted engineeri
Extracted skills: azure, kubernetes, security, operations