Security & Compliance Engineer - Brook Inc

About Brook Inc

Brook is a digital health company. Brook offers a set of products and services extending health-care-management beyond the walls of doctors’ offices and into people’s homes and their day-to-day lives. Brook provides people who are living with chronic conditions a highly personalized high-touch support via a smartphone app offering AI tools, data collection through connected devices, and real-time access to health coaches to make smart, daily decisions and to build healthy habits to achieve their long-term health goals. Brook also offers a CDC-approved preventative program for people who are at high risk for diabetes. For primary care providers, Brook offers SaaS tools for continuous remote monitoring, providing insights into their patient’s health needs, enabling a new model of care, and early preventative interventions with our own care delivery team resulting in better health outcomes.

We are seeking a highly motivated and experienced Security, Compliance, and IT Engineer to join our team. The ideal candidate will possess a strong background in information technology, information security, and regulatory compliance, particularly within the Healthcare industry. This role is critical in ensuring our company’s compliance with health-related regulations, such as HIPAA, while maintaining a robust IT infrastructure.

Key Responsibilities:

Security & Compliance:

1. Implement and maintain security measures to protect sensitive health information, ensuring compliance with HIPAA and other relevant regulations.

2. Develop and enforce IT security policies and procedures to ensure the confidentiality, integrity, and availability of information systems.

3. Conduct regular risk assessments, audits, and penetration tests to identify vulnerabilities and implement mitigation measures.

4. Manage and secure cloud infrastructure, ensuring robust cloud security practices are in place.

5. Collaborate with internal teams to design and develop secure and compliant IT solutions for the company and its clients.

6. Stay informed about industry trends, emerging technologies, and regulatory changes to ensure ongoing compliance and competitive advantage.

7. Serve as the primary point of contact for external auditors and regulatory agencies during audits and inspections.

8. Work with external partners to ensure compliance and security standards are met.

Information Technology:

1. Evaluate, develop, and maintain the company’s IT infrastructure to support organizational needs.

2. Manage company employees’ computers, assisting with onboarding and offboarding processes.

3. Provide training and guidance to employees on information security best practices and regulatory compliance requirements.

4. Assist with developing and maintaining the company’s business continuity and disaster recovery plans.

Requirements:

1. Bachelor’s degree in Computer Science, Information Technology, Information Security, or a related field, or equivalent experience.

2. Minimum of 3 years of experience in IT, security, and compliance, preferably in the Healthcare industry.

3. In-depth knowledge of HIPAA and SOC 2 regulations and standards.

4. Knowledge and hands-on experience in cloud security, including securing cloud infrastructure and services.

5. Strong understanding of information security principles, best practices, and technologies.

6. Experience in conducting penetration tests and analyzing results to improve security posture.

7. Familiarity with IT infrastructure, including networking, server administration, and cloud computing.

8. Experience in conducting risk assessments, audits, and vulnerability assessments.

9. Excellent communication skills, with the ability to explain complex concepts to a diverse audience.

10. Strong analytical and problem-solving skills.

11. Ability to manage multiple tasks and priorities effectively and adapt to changing demands.

12. Relevant certifications (e.g., CISSP, CISM, CISA, or CHPS) are a plus.

PI251404933