HIPAA Security Program Manager

Develop, implement, and maintain HIPAA compliance programs , including privacy, security, and breach notification rules. Lead internal security audits, risk assessments, and HIPAA gap analyses . Drive Corrective Action Plans (CAPs) by tracking, reporting, and managing remediation efforts. Stay up to date on HIPAA regulatory changes and industry best practices to enhance the compliance program. Support third-party audits, HIPAA certifications , and customer security assessments. Develop policies, procedures, and training materials to enhance HIPAA security awareness . Maintain security documentation and ensure compliance with corporate governance requirements. Act as a subject matter expert for HIPAA security compliance-related inquiries . Ensure compliance with industry security standards such as NIST, ISO 27001, SOC 2, GDPR, CCPA, and PCI-DSS . Conduct overall security risk assessments and implement security controls to mitigate risks beyond HIPAA. Partner with IT, security, legal, and business teams to address security gaps and meet compliance requirements. Manage third-party risk assessments to ensure vendor compliance with security frameworks. Provide guidance on security incident response and compliance reporting requirements. Qualifications: Bachelor's degree in information security, computer science, or a related field (or equivalent work experience). 5 years of experience in security compliance , including HIPAA , IT audit, risk management, or related fields. Strong knowledge of HIPAA security and privacy rules , CAP management , and other compliance standards such as ISO 27001, SOC 2, NIST, and PCI-DSS . Experience working with third-party auditors and regulatory bodies. Excellent project management, communication, and stakeholder engagement skills. Ability to work independently and manage multiple projects simultaneously. Certifications such as CHP, CHPS, CISSP, CISA, CISM, CRISC, or similar are a plus.

Location: México, MX

Posted Date: 5/25/2025