Senior Director, Information Security

The role

The Senior Director, Information Security serves as the HIPAA Security Officer and leads the company's information security program. This role owns governance, control environments, certification and audit programs, and security risk management.

What you will do

• Serve as the company's designated HIPAA Security Officer.
• Lead the company's information security program and partner with various stakeholders.
• Assess cloud architectures, application architectures, CI/CD pipelines, and security monitoring.
• Own HIPAA Security Rule compliance, including Security Risk Analysis and risk-management plans.
• Own the SOC 2 Type II program and other security certifications and audits.
• Own the information-security policy and control framework.
• Establish ownership for security controls and ensure remediation of deficiencies.
• Partner with technical leaders to evaluate security approaches.
• Establish and oversee vulnerability-management and application-security programs.
• Own the security incident-response framework and coordinate responses.

Required qualifications

• 8+ years of experience in information security, risk management, compliance, or related disciplines, including meaningful leadership responsibility.
• Deep practical knowledge of HIPAA/HITECH and healthcare security and compliance requirements.
• Strong working knowledge of cloud security, application security, IAM, vulnerability management, endpoint security, secure SDLC practices, and modern SaaS architecture.
• Demonstrated experience leading SOC 2 Type II or comparable certification and assurance programs.
• Experience building or materially improving information security governance, control environments, policy frameworks, audit readiness, and cross-functional accountability.
• Strong working knowledge of AI security, governance, and risk management.
• Ability to engage credibly with technical leaders and translate technical issues into business, compliance, and customer impact.
• Strong executive judgment and communication skills.
• Demonstrated ability to drive accountability across functions without relying solely on direct reporting relationships.

Nice to have

• Relevant certifications such as CISSP, CISM, CRISC, CISA, CHC, or similar

Benefits

• Competitive salaries
• Potential equity compensation for outstanding performance
• Flexible PTO
• Company-wide sponsored lunches
• Company paid disability and life insurance benefits
• Company paid family and medical leave
• Medical, dental, and vision insurance benefits
• Discounted pet insurance
• FSA/DCA and commuter benefits
• 401k
• Credits for online fitness classes/gym memberships
• Recovery suite at HQ — includes a cold plunge, sauna, and shower

Before you apply

• Policy not to hire individuals from Prompt Customers unless they have obtained their current employer's explicit consent.

About the company

Prompt is a healthcare SaaS company delivering automated software to rehab therapy businesses. It is one of the fastest-growing companies in healthcare technology.