Softheon

Compliance

• Lead the GRC function, developing and implementing enterprise-wide governance, risk management, and compliance frameworks that align with healthcare regulations (HIPAA, HITRUST, CMS, ACA, Medicare, Medicaid, PCI-DSS, SOC, NIST, MARS-E, and others).
• Maintain oversight and optimization of GRC platforms and tools (e.g., AuditBoard), driving automation and workflow improvement.
• Serve as the subject-matter authority for evolving regulatory requirements, business continuity planning, enterprise risk management, and third-party/vendor risk.
• Oversee internal and external audits, responding to client, regulatory, and operational reviews, ensuring timely and effective resolution and communication.
• Translate compliance requirements into organizational policies, reporting structures, and training programs that foster a culture of risk awareness and accountability.
• Establish and manage the Project Management Office as a center of excellence, developing scalable frameworks, standards, and tools supporting a hybrid (Agile, Waterfall, Lean/Six Sigma) methodology environment.
• Oversee intake, prioritization, resource allocation, and delivery of the enterprise project portfolio—ensuring projects meet timelines, budgets, and business objectives.
• Apply risk-based thinking and GRC insight to project selection, resource planning, and execution, ensuring alignment with overall business strategy.
• Mentor and lead project management staff, coach on effective project lifecycle management, risk tracking, and successful delivery practices.
• Collaborate with executive sponsors and cross-functional stakeholders to communicate project status, risk mitigation measures, and value delivery transparently and persuasively.
• Champion process improvement and innovation leveraging industry best practices and new technologies.
• Build and lead high-performing, multidisciplinary GRC and PMO teams—providing direct mentorship, fostering talent development, and succession planning.
• Promote an inclusive, collaborative, and high-accountability culture that values compliance excellence, continuous learning, and operational agility.
• Advise and present to executive leadership and the Board on GRC and project management trends, risk analysis, KPIs, and strategic initiatives.
• Engage in recruiting, hiring, and developing staff whose skills align with the company’s mission and values.

Director of GRC, EPMO

Security Operations

• Security Operations Engineer at Softheon strengthens cloud and hybrid security posture with Microsoft Defender, Sentinel, and cloud-native tools.
• Collaborates with Cloud Security, Compliance, DevOps, and Engineering to embed security across the organization.
• Maintains regulatory compliance (HIPAA, SOC 2) and advances security automation for Azure and SaaS.
• You will lead security improvements including Azure, Zero Trust; design secure architectures; deploy policy as code; CSPM/CASB; etc.
• Requires strong self-direction, problem-solving, team-first mentality; guards integrity, confidentiality, availability of Softheon’s healthtech SaaS ecosystem.