Security Compliance Program Manager
CentralReachHolmdel, New Jersey, United States · Posted 3 days agoDescription
CentralReach is a leading provider of autism and IDD care software for Applied Behavior Analysis (ABA), multidisciplinary therapy, and special education. Trusted by more than 200,000 users, we enable therapy providers, educators, and employers to scale the way they deliver ABA and related therapies with innovative technology, market-leading industry expertise, and world-class customer satisfaction.
The Security Compliance Program Manager will own and drive CentralReach’s overall compliance program, working directly with the Chief Compliance Officer and Chief Information Security Officer. Beyond day-to-day maintenance and special projects, this role brings program ownership: translating regulatory and security standards into action plans, building KPIs and reporting cadences for leadership, developing metrics, monitoring, and incident response capabilities in partnership with Information Security and Infrastructure teams, and continually evolving the program’s processes and tooling.
Key Accountabilities:
- Lead and Manage Third-Party and Internal Audits
- SOC 2 Type 2
- HIPAA Attestation
- Privacy Audit
- Security Audits
- Compliance Program Strategy & Implementation
- Translate requirements from regulatory and security frameworks (e.g., NIST 800-53, SOC 2, HIPAA) into concrete action items for cross-functional teams
- Track progress and communicate compliance rollout status with the teams doing the work
- Program Reporting & Communication
- Develop KPIs and dashboards to measure compliance program maturity, and report on them regularly to the Chief Compliance Officer and leadership
- Partner with Information Security and IT leadership to continually evolve the compliance program
- Metrics, Monitoring & Incident Response
- Partner with Security and Infrastructure teams to support automated identification, alerting, and response for compliance-relevant risks and incidents
- Maintain the compliance/security Incident Response Plan
- Support on-call and escalation planning for compliance and security incidents
- Compliance Process Development & Tooling
- Create, implement, and automate recurring compliance processes, such as account and access reviews and employee onboarding/offboarding checks
- Identify and evaluate GRC (governance, risk, and compliance) and compliance management tools to support the program
- Projects
- Build out the compliance program KPI framework and reporting cadence for leadership
- Manage Security and Compliance policy updates
- Lead and manage required internal audits
- Oversee Vendor Management
- Implement security and compliance program
- Desired Skills and Experience:
- Experience working with auditors through internal and external security and compliance audits
- Working knowledge of security and compliance frameworks (e.g., NIST 800-53, SOC 2, HIPAA, ISO 27001) and the ability to translate them into operational action plans
- Experience developing KPIs, metrics, and reporting cadences for program and executive leadership
- Familiarity with security monitoring, alerting, and incident response concepts
- Experience with Business Continuity and Disaster Recovery planning
- Process improvement and automation mindset, including experience evaluating and implementing GRC or compliance management tools
- Strong cross-functional collaboration and stakeholder management, including with Information Security, Infrastructure, and Legal teams
- Proven ability to manage multiple compliance initiatives simultaneously (e.g., audit cycles, risk assessments, policy rollouts) with competing timelines and cross-functional dependencies
- Excellent written and verbal communication skills, with demonstrated ability to translate complex regulatory or legal requirements into clear, actionable guidance for non-compliance audiences
- Detail-oriented approach to documenting audit findings, risk assessments, or corrective action plans, with follow-through on tracking items to closure
- Analytical mindset with a track record of identifying root causes of process or control gaps and recommending sustainable fixes rather than short-term patches
Similar jobs
About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to…
Est. 120,000 USD
About Judi Health Judi Health is a health technology company providing benefit administration solutions to employers, unions, health plans, and government entities. Judi Health replaces fragmented, outdated systems with…
Est. 250,000 USD
Title: Chief Information Security Officer (CISO) Location: Morristown, NJ / Austin, TX(hybrid) Reports To: Chief Technology Officer About Hippo: Hippo was built on a promise: make homeownership effortless. Nearly a decad…
Est. 250,000 USD
Title: Chief Information Security Officer (CISO) Location: Austin, TX / Morristown, NJ (hybrid) Reports To: Chief Technology Officer About Hippo: Hippo was built on a promise: make homeownership effortless. Nearly a deca…
Est. 165,000 USD
Build a Career That Changes Lives—Including Your Own. 24 Hour Home Care is a leading provider of home care and community-based services dedicated to helping individuals live safely and independently. As part of TEAM Serv…
About Energy Exemplar In an era where the world is rapidly advancing towards a cleaner future through decarbonization, Energy Exemplar’s mission lies in ‘Empowering Transformative Energy Decisions’. Founded in 1999 in Ad…
Truveta provides unprecedented real-world data and real-time intelligence, powered by a dataset built with and owned by US health systems united in a mission of Saving Lives with Data. Together, we power breakthrough med…
InMobi Advertising is a global technology leader helping marketers win the moments that matter. Our advertising platform reaches over 2 billion people across 150+ countries and turns real-time context into business outco…
Est. 120,000 USD
About Yondr Yondr is a disruptor. We challenge convention and simplify complexity. A global developer, owner operator and service provider of data centers, we deliver complex data center capacity needs for the world’s la…
Est. 80,000 EUR
Position Overview: As a Senior Solutions Engineer at Diligent, you will partner closely with Sales to help organizations understand how our platform can transform the way they operationalise ethics, compliance and broade…
About Agoda At Agoda, we bridge the world through travel. Our story began in 2005, when two lifelong friends and entrepreneurs, driven by their passion for travel, launched Agoda to make it easier for everyone to explore…
Est. 140,000 USD
About the Company General Matter is enriching uranium in America. Our goal is to design, build, and operate the world’s lowest-cost enrichment services in the United States. Our mission is to restore America’s ability to…
Truveta provides unprecedented real-world data and real-time intelligence, powered by a dataset built with and owned by US health systems united in a mission of Saving Lives with Data. Together, we power breakthrough med…
Est. 144,000 USD
About SHEIN SHEIN is a global online fashion and lifestyle retailer, offering SHEIN branded apparel and products from a global network of vendors, all at affordable prices. Headquartered in Singapore, with more than 15,0…
Est. 250,000 USD
About the Role: PubMatic is seeking a Director of Information Security to lead and evolve our global security program across enterprise infrastructure, cloud platforms, products, corporate systems, and emerging AI techno…
Est. 140,000 USD
AI Governance Engineer Dalio Family Office Overview: The Dalio Family Office (DFO) supports Barbara and Ray Dalio and their family in their ventures, investments, and philanthropic efforts under Dalio Philanthropies,…
Est. 115,000 USD
Axsome Therapeutics is a biopharmaceutical company leading a new era in the treatment of central nervous system (CNS) conditions. We deliver scientific breakthroughs by identifying critical gaps in care and develop diffe…
Est. 120,000 USD
Cordance is dedicated to accelerating the growth of vertically focused business-to-business (B2B) software-as-a-service (SaaS) companies through acquisition and long-term tactical and financial guidance. We’re experience…
Est. 140,000 USD
Company Overview Amperesand is reinventing how the world powers its most critical systems. We are facing a once-in-a-generation opportunity for infrastructure disruption. Electricity demand is skyrocketing, driven by AI…
Est. 80,000 EUR
At Cision, we believe in empowering every individual to make an impact. Here, your voice is heard, your ideas are valued, and your unique perspective fuels our collective success. As part of our global team, you'll thriv…
Why Valtech? We’re the experience innovation company - a trusted partner to the world’s most recognized brands. To our people we offer growth opportunities, a values-driven culture, international careers and the chance t…
Est. 175,000 USD
About Ceribell Ceribell is a medical technology company focused on transforming the diagnosis and management of patients with serious neurological conditions. The Ceribell System is a novel, point-of-care electroencephal…
Why Valtech? We’re the experience innovation company - a trusted partner to the world’s most recognized brands. To our people we offer growth opportunities, a values-driven culture, international careers and the chance t…
Est. 144,000 USD
Toshiba Global Commerce Solutions is seeking a hands-on Lead Software Engineer to drive end-to-end solution delivery for major retail platforms. In this role, you will own hands-on implementation (feature development, te…
Est. 140,000 USD
Madison Square Garden Entertainment Corp. (MSG Entertainment) is a leader in live entertainment, delivering unforgettable experiences while forging deep connections with diverse and passionate audiences. The Company’s po…
Est. 85,000 EUR
About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to…
Est. 140,000 USD
About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to…
Est. 124,000 USD
About the Company General Matter is enriching uranium in America. Our goal is to design, build, and operate the world’s lowest-cost enrichment services in the United States. Our mission is to restore America’s ability to…
Est. 140,000 USD
The Nuclear Company is the fastest growing AI tech-enabled startup in the nuclear and energy space, pioneering a fleet-scale approach to building the next generation of nuclear reactors. Through our design-once, build-ma…
Most security assurance work is reactive: a customer asks, a team scrambles, an answer goes out. This role exists to end that cycle. As a Senior Staff Analyst, you’ll own a named portfolio of our most significant custome…