Healthcare Compliance & Security Consultant (HIPAA Readiness)

About Us We are a cloud consulting and technology transformation company that helps organizations modernize applications, data platforms, analytics, and AI solutions on AWS. Our team works with customers across multiple industries to design, build, and operate secure cloud environments, enterprise data platforms, and AI-powered solutions. As we continue expanding into regulated industries, we are investing in a comprehensive HIPAA compliance program to support healthcare customers while maintaining strong security, governance, and operational standards. We are looking for an experienced consultant who has successfully guided technology organizations through HIPAA readiness and can help establish a practical, scalable compliance program. About the Engagement This is a hands-on consulting engagement where you will assess our current environment, identify compliance gaps, and lead the implementation of the processes, documentation, and security controls required to support HIPAA-regulated customers. You will work closely with company leadership, engineering, cloud, operations, and HR teams to build a compliance program that becomes part of our day-to-day operations rather than a one-time documentation exercise. What You'll Do • Assess how our services, internal operations, and cloud environments align with HIPAA requirements. • Identify areas where protected health information (PHI) could be created, received, accessed, maintained, or transmitted. • Conduct a comprehensive HIPAA Security Risk Analysis and develop a prioritized remediation roadmap. • Design practical governance, security, and operational processes that support long-term compliance. • Develop the policies, procedures, and documentation required for HIPAA readiness. • Review our cloud security architecture and recommend improvements aligned with HIPAA safeguards. • Establish processes for vendor management, Business Associate Agreements (BAAs), workforce training, and compliance monitoring. • Guide implementation efforts across technical and operational teams. • Provide executive-level recommendations and validate readiness once remediation activities are complete. What We're Looking For • Extensive experience leading HIPAA readiness or compliance programs for technology companies, SaaS providers, consulting firms, managed service providers, or Business Associates. • Strong understanding of the HIPAA Privacy Rule, Security Rule, and Breach Notification Rule. • Experience conducting HIPAA Security Risk Analyses and translating findings into practical implementation plans. • Knowledge of cloud security, governance, and modern infrastructure environments, preferably AWS. • Ability to work comfortably with both executive leadership and technical delivery teams. • Excellent communication and documentation skills. Preferred Experience • AWS cloud security and governance • Healthcare technology or digital health organizations • NIST Cybersecurity Framework and NIST guidance for implementing HIPAA security requirements • SOC 2 implementation or audit readiness • HITRUST familiarity • Certifications such as HCISPP, CISSP, CISM, CISA, CHPS, or similar Expected Deliverables By the end of the engagement, you should have delivered: • HIPAA applicability and scope assessment • HIPAA Security Risk Analysis • Compliance gap assessment • Prioritized remediation roadmap • HIPAA policy and procedure framework • Vendor and BAA management process • Workforce training recommendations • Compliance evidence repository structure • Executive readiness report with implementation recommendations Why Join This Project This is an opportunity to build a HIPAA compliance program from the ground up for a fast-growing cloud consulting organization. You'll work directly with leadership, influence company-wide security and governance practices, and establish a scalable framework that supports future healthcare customers.