Security and Compliance Manager

As a Security and Compliance Manager at Visit Health, you will play a crucial role in enhancing the security frameworks, regulatory compliance, and risk management initiatives of the organization. Your responsibilities will include: - Develop and implement security policies, standards, and guidelines to ensure a secure environment. - Conduct risk assessments and security audits to identify vulnerabilities and mitigate risks effectively. - Collaborate with IT and legal teams to ensure secure infrastructure and data protection measures are in place. - Monitor emerging security threats and provide recommendations for appropriate countermeasures. In terms of regulatory compliance and audits, you will be expected to: - Ensure compliance with industry regulations such as ISO 27001, HIPAA, GDPR, SOC 2, PCI-DSS, NIST, and other relevant standards. - Lead internal and external security audits, managing relationships with auditors and regulators efficiently. - Develop compliance reports and maintain documentation for audits and assessments. - Educate internal teams on compliance requirements and security best practices to foster a culture of compliance. Your role will also involve overseeing data protection and privacy measures: - Implement and maintain data protection policies to safeguard sensitive information. - Work with legal and IT teams to ensure compliance with global privacy laws such as GDPR, CCPA, and others. - Conduct Data Protection Impact Assessments (DPIAs) and oversee incident response plans related to data breaches. In the realm of incident management and response, you will be responsible for: - Developing and maintaining incident response plans and security monitoring mechanisms. - Leading investigations into security incidents, breaches, and compliance violations. - Collaborating with cybersecurity teams to implement security controls and remediation strategies effectively. Additionally, you will be tasked with conducting security awareness training for employees to promote a security-first culture and staying updated on new regulations and industry trends to adapt policies proactively.,