Security and Compliance Manager

About the Company

Visit Health is a pioneering health-tech platform dedicated to making healthcare accessible, affordable, and preventive. It operates as an all-in-one wellness ecosystem connecting doctors, insurers, and millions of families through services ranging from physical and mental wellness to OPD benefits.

Responsibilities

• Develop and implement security policies, standards, and guidelines
• Conduct risk assessments and security audits to identify vulnerabilities
• Ensure compliance with industry regulations such as ISO 27001, HIPAA, GDPR, SOC 2, PCI-DSS, and NIST
• Lead internal and external security audits and manage auditor relationships
• Implement data protection policies to safeguard sensitive information
• Conduct Data Protection Impact Assessments (DPIAs)
• Develop and maintain incident response plans and security monitoring mechanisms
• Lead investigations into security incidents and breaches
• Conduct security awareness training for employees

Requirements

• 2.5 to 5 years of experience in security and compliance
• Deep understanding of ISO 27001, HIPAA, GDPR, SOC 2, PCI-DSS, and NIST frameworks
• Experience leading security audits and managing regulatory compliance
• Knowledge of global privacy laws including GDPR and CCPA
• Ability to develop incident response and remediation strategies