Healthcare Regulatory Assurance Lead (Healthcare)

Location: United States of America. Candidates near San Antonio, TX work a hybrid schedule with two office days; candidates elsewhere in the United States may work 100% from home. Candidates must be legally allowed to work in the US for any employer. The role is not sponsorship eligible and is not open to F-1 OPT visa holders.

Salary: $119,583.00–$175,388.40 per year, depending on geographic market, knowledge, skills, and experience. Additional compensation may include annual bonuses or incentives, equity awards, and an Employee Stock Purchase Plan.

Company

hirify.global Technology operates enterprise AI infrastructure, data, software integration, cloud, applications, cybersecurity, and compliance solutions for regulated and mission-critical environments.

What you will do

• Own the healthcare regulatory and compliance-escalation lane, embedding HIPAA, HITECH, HITRUST, and related obligations into delivery governance.
• Review Deal Gate submissions involving regulatory or compliance scope within the Healthcare Delivery Assurance Office’s five-working-day turnaround.
• Partner with Clinical Leadership and clinical informatics specialists to validate commitments involving PHI, clinical workflows, and regulated data.
• Lead healthcare-specific risk assessments, compliance audits, control testing, vendor due diligence, and breach-notification readiness.
• Coordinate with control owners, external auditors, regulators, customers, and certification bodies on HITRUST, SOC 2 healthcare scope, and HIPAA audits.
• Maintain compliance criteria, review assurance findings, provide evidence for healthcare go-lives, and develop regulatory training and communications.

Requirements

• Advanced to expert-level knowledge of HIPAA, HITECH, HITRUST, 42 CFR Part 2, and CMS/ONC interoperability and information-blocking rules.
• Expert-level knowledge of IT risk management, GRC, and regulatory audit practice.
• Working knowledge of AI governance and assurance architecture, including policy enforcement, provenance, auditability, verification, and release gating applied to healthcare data and clinical workflows.
• Knowledge of healthcare breach-notification timelines and regulatory escalation paths.
• Risk assessment and management, audit, cybersecurity, analytical, stakeholder management, process improvement, vendor management, strategic planning, and technology integration skills.
• High school diploma or regional equivalent required.
• Bachelor’s degree required, preferably in a related field; at the manager’s discretion, additional relevant experience may substitute for the degree requirement.
• At least two security or GRC certifications required from CISSP, CISM, CISA, CCSP, CRISC, GRCP, CGEIT, or similar.
• HCISPP or CHPS certification required or must be in progress.
• 10+ years of experience in IT risk, security, or compliance, including at least five years focused on healthcare regulatory compliance involving HIPAA and HITRUST within a healthcare provider, payer, or healthcare technology environment.

Nice to have

• Additional hirify.global product and business-focused certifications.

Culture & Benefits

• Remote work from within the United States, with a hybrid schedule requiring two office days for candidates near San Antonio, TX.
• Compensation varies across geographic markets and may include bonus or incentive compensation, equity awards, and an Employee Stock Purchase Plan.
• Work supporting regulated and mission-critical customer environments across AI, cloud, applications, data, cybersecurity, and compliance.
• Equal employment opportunity and reasonable accommodation are provided.