Healthcare Regulatory Assurance Lead
About The Position
The Healthcare Regulatory Assurance Lead leads regulatory assurance for the Healthcare Vertical, combining governance-and-assurance architecture discipline with hands-on security, risk, and compliance management for regulated healthcare environments. The role owns the design and day-to-day operation of the compliance and regulatory-escalation lane within the Healthcare Delivery Assurance Office. It embeds HIPAA, HITECH, HITRUST, and related healthcare data-protection and breach-notification obligations into the Deal Gate's regulatory/compliance trigger, the Findings & Assurance Register, and Operational Readiness Review evidence. The role represents Rackspace's healthcare regulatory posture to customers, auditors, and certification bodies, and partners closely with Clinical Leadership (CDHO) and partner-sourced clinical informatics. The position is based in the United States: candidates near San Antonio, Texas, work a hybrid schedule with two office days; candidates elsewhere may work fully from home, subject to the country-residency restriction for remote postings. The role is not sponsorship eligible, and candidates must be legally authorized to work in the United States for any employer. It is not open to F-1 OPT visa holders.
Requirements
- Advanced to expert-level knowledge of healthcare-specific compliance regulations and standards, including HIPAA, HITECH, HITRUST, 42 CFR Part 2, and CMS/ONC interoperability and information-blocking rules.
- Expert-level knowledge of IT risk management, governance, risk and compliance (GRC), and regulatory audit practice.
- Working knowledge of AI governance and assurance architecture principles, including policy enforcement, provenance, auditability, verification, and release gating, as applied to healthcare data and clinical workflows.
- Knowledge of healthcare data breach-notification timeline obligations and regulatory escalation paths.
- Skills in risk assessment/management, auditing, cybersecurity, analytical work, internal and external stakeholder management, process improvement, vendor management, strategic planning, and technology integration.
- High school diploma or regional equivalent required.
- Bachelor's degree required, preferably in a field related to the role; at the manager's discretion, additional relevant experience may substitute for the degree requirement.
- At least two security/GRC-based certifications required, such as CISSP, CISM, CISA, CCSP, CRISC, GRCP, CGEIT, or similar.
- Healthcare-specific certification required or in progress: HCISPP or CHPS.
- At least 10 years of experience in IT risk, security, or compliance.
- At least five years of the required experience must focus on healthcare-specific regulatory compliance (HIPAA, HITRUST) within a healthcare provider, payer, or healthcare technology environment.
- Must be legally authorized to work in the United States for any employer; sponsorship is not available and F-1 OPT visa holders are not eligible.
- For remote work, candidates must reside in the United States.
Nice To Haves
- Additional Rackspace product and business-focused certifications.
- Candidates located near San Antonio, Texas may work hybrid, while candidates elsewhere in the United States may work fully from home.
Responsibilities
- Own the regulatory and compliance-escalation lane for the Healthcare Vertical, embedding HIPAA, HITECH, HITRUST, and related obligations into delivery.
- Serve as the named regulatory/compliance reviewer on Deal Gate submissions triggered by regulatory or compliance scope, meeting the Healthcare Delivery Assurance Office's five-working-day turnaround.
- Partner with Clinical Leadership (CDHO) and partner-sourced clinical informatics to validate non-standard commitments involving PHI, clinical workflows, or regulated data before customer commitment.
- Lead healthcare-account risk assessments, compliance audits, and control testing, including HIPAA, HITRUST, and breach-notification timeline readiness.
- Act as the conduit between internal control owners and external auditors or regulators for healthcare accreditation activity, including HITRUST, SOC 2 healthcare scope, and HIPAA audits.
- Maintain and evolve regulatory and compliance criteria in the Deal Gate Trigger Criteria and Governance Charter as healthcare regulations change, including PHI-export and new-PHI-flow triggers.
- Review regulatory- or compliance-related findings in the Findings & Assurance Register and ensure remediation plans meet HIPAA/HITRUST obligations and committed breach-notification timelines.
- Provide regulatory evidence and sign-off input for healthcare go-live Operational Readiness Reviews.
- Represent Rackspace's healthcare regulatory posture to customer compliance teams, auditors, and certification bodies.
- Maintain expert knowledge of healthcare regulations and advise the Healthcare Delivery Assurance Office and Clinical Leadership on emerging obligations.
- Support vendor and third-party due diligence for partner-sourced clinical informatics and other healthcare-adjacent vendors.
- Develop training and communications on healthcare-specific regulatory obligations for the Healthcare Delivery Assurance Office and delivery pods.
Benefits
- The compensation package may include annual bonus or other incentive compensation opportunities.
- The compensation package may include equity awards.
- Employee Stock Purchase Plan (ESPP).
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
