Information Security Specialist – Compliance Focus

About the role

The Information Security Specialist will support DeepHealth’s Quality, Regulatory, and Compliance department by developing and maintaining comprehensive security compliance programs to protect health data and meet regulatory requirements.

Key responsibilities

• Develop and implement holistic security compliance programs and risk management frameworks.
• Create and maintain security policies, procedures, and guidelines aligned with organizational and regulatory objectives.
• Ensure compliance with HIPAA, GDPR, CCPA, ISO 27001, HITRUST and support audit processes.
• Perform vulnerability assessments, monitor incidents, and manage incident response plans.
• Collaborate with IT, Legal, Clinical and other teams to provide security guidance and training.

Required profile

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science or related field; advanced degree or certifications preferred.
• 3‑5 years of progressive security compliance experience in healthcare or highly regulated industries.
• Proven ability to develop and implement security strategies and communicate complex concepts.
• High integrity, confidentiality and strong interpersonal skills.

Required skills

• HIPAA, GDPR, CCPA, ISO 27001, HITRUST compliance knowledge.
• Risk assessment and vulnerability assessment techniques.
• Incident response planning and execution.
• Access control and identity management systems.
• Security frameworks and policy development.
• CISSP, CISM, CRISC certifications.