Manager/ Senior Manager, HITRUST Assurance

Working at Thoropass

Thoropass makes it as easy to do the right thing as it is to check a box. Our team members believe that partnership lightens the load. Not everyone can be an expert at everything – lending each other support in areas of weakness strengthens everyone’s offering. We collaborate openly and enthusiastically; without ego. Thoropass makes it as easy to do the right thing as it is to check a box.

What We Do

At Thoropass, we’re compliance experts, so you don’t have to be. Pairing easy software that’s always getting smarter with expert guidance and continuous monitoring, we integrate into your process to prepare you to pass any audit every year with flying colors. Hundreds of growing companies use Thoropass’s compliance automation platform, expert services, auditors, and partner ecosystem to get and stay compliant over the lifetime of their business. We offer SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS, and other InfoSec and privacy frameworks.

We are a rapidly expanding team based in New York. We were founded in May 2019 and raised our Series C funding in November 2022. Our top investors include J.P. Morgan, PayPal Ventures, Fin Capital, Centana, and Bain Capital. We're growing customers and revenue dramatically and we’re poised for continued break-out growth in 2023 and beyond.

About the Job

Thoropass is looking for a dynamic and enterprising Manager/ Senior Manager of HITRUST Assurance to join our team. Thoropass is a new approach to Information Security and Privacy Compliance combining automation, expert advice, and guidance.

• Are you scrappy, resourceful, reliable, and a creative problem solver?
• Are you ready to channel your aspiration and creativity into building a best-in-class information security compliance management solution and driving positive and significant business impact?
• Are you highly organized and detail-oriented, with excellent communication skills and a strong bias towards getting things done?
• Are you an advocate of continuous improvement and questioning the status quo?

If so, let’s talk!

What You Will Do 

• Grow and expand audit capabilities to allow for increased volume and greater efficiency of HITRUST certification 
• Advise on projects related to creating HITRUST controls and HITRUST audit readiness content
• Advise product and engineering team on improving HITRUST compliance and HITRUST audit software functionality

Required Experience

  Expert-level understanding of HITRUST requirements

• Minimum of 4 - 7+ years of experience performing HITRUST audits or other related IT audits within an audit or consulting firm  
• Understanding of advanced cloud technologies (AWS, GCP, Azure) 
• Comfort interacting with customers
• Excellent problem-solving and evaluative skills
• Experience overseeing all areas of the HITRUST Assurance Lifecycle, including account management, project management, training and personnel development, quality assurance, and customer expectation management 
• Experience generating revenue for a software company or professional services firm through consultative sales or expert delivery of services 
• Experience working with the HITRUST Organization, including their assurance team (QA) as well as MyCSF 
• Ability to address information security questions in a clear and concise manner
• Possess a helpful and professional attitude with excellent verbal and written skills
• Strong sense of curiosity to solve problems
• Currently possesses CCSFP and CHQP or ability to acquire CHQP

Bonus Points

• CISSP, CISA, or equivalent technical certification (AWS Solutions Architect, etc). 

Your Compensation

• Compensation range for this position is $130,000 - $180,000 base salary. Placement will be based on experience, skills, and location 
• Quarterly variable compensation based on performance
• Exceptional health, vision, and dental care
• Early equity in a fast-growing company
• Unlimited PTO
• Home office equipment stipend
• Monthly wellness and wifi stipend
• Pet insurance

Equal Opportunity

Thoropass provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

Even if you feel you don’t meet every requirement, consider applying! Thoropass acknowledges the research which shows that women and people of color are less likely to apply for jobs when they don’t meet all of the stated qualifications. However, we’re looking for authentic innovators to blaze new trails and you just may be the right person for this or another role.