IT Compliance Manager

Job DescriptionJob Description

About us

LifeMD is a leading digital healthcare company committed to expanding access to virtual care, pharmacy services, and diagnostics by making them more affordable and convenient for all. Focused on both treatment and prevention, our unique care model is designed to optimize the patient experience and improve outcomes across more than 200 health concerns.

To support our expanding patient base, LifeMD leverages a vertically-integrated, proprietary digital care platform, a 50-state affiliated medical group, a 22,500-square-foot affiliated pharmacy, and a U.S.-based patient care center. Our company — with offices in New York City; Greenville, SC; and Huntington Beach, CA — is powered by a dynamic team of passionate professionals. From clinicians and technologists to creatives and analysts, we're united by a shared mission to revolutionize healthcare. Employees enjoy a collaborative and inclusive work environment, hybrid work culture, and numerous opportunities for growth. Want your work to matter? Join us in building a future of accessible, innovative, and compassionate care.

Position Summary

We are seeking a highly skilled and experienced IT Compliance Manager to join our growing team. In this critical role, you will be the cornerstone of our IT compliance program, with a specialized focus on ensuring adherence to Sarbanes-Oxley (SOX) IT General Controls (ITGC) and the Health Insurance Portability and Accountability Act (HIPAA). You will be instrumental in safeguarding our financial reporting integrity and protecting sensitive patient health information (PHI) across our dynamic technology landscape. If you are a meticulous professional with a passion for IT governance and regulatory compliance in a fast-paced healthcare technology environment, we encourage you to apply.

Core Responsibilities

• Design, implement, and maintain robust IT compliance frameworks, policies, and procedures, with a strong emphasis on SOX ITGC and HIPAA regulations
• Conduct targeted risk assessments and audits of IT systems, infrastructure, and processes to identify and mitigate compliance gaps related to financial reporting and PHI
• Develop and manage remediation plans for identified compliance issues, ensuring timely resolution
• Monitor evolving regulatory landscapes (SOX, HIPAA) and proactively update IT policies and procedures
• Collaborate closely with IT, Finance, Legal, Security, and Healthcare Operations teams to embed compliance into daily operations
• Ensure effective implementation and operation of security controls, including access management, audit logging, and data encryption, to meet SOX and HIPAA requirements
• Develop and deliver comprehensive compliance training programs for employees, tailored to SOX ITGC and HIPAA
• Lead and coordinate internal and external IT compliance audits
• Manage vendor risk assessments, particularly for those handling financial data or PHI
• Contribute to incident response efforts, focusing on potential SOX control weaknesses or HIPAA breaches

Requirements

Basic Qualifications:

• Bachelor's degree in Computer Science, Information Systems, Business Administration, or a related field
• 5+ years of experience in IT compliance, IT audit, or a related role, with specific, hands-on experience in SOX ITGC and HIPAA
• Strong understanding of SOX ITGC requirements and best practices (change management, access controls, computer operations, SDLC)
• In-depth knowledge of HIPAA Privacy, Security, and Breach Notification Rules
• Experience with IT risk assessment methodologies
• Proficiency in developing and implementing IT policies and procedures
• Knowledge of relevant industry frameworks and standards (e.g., NIST, ISO 27001)
• Experience managing IT audits (internal and external)
• Familiarity with technical security controls and their implementation
• Demonstrated ability to interpret and apply complex regulatory requirements to IT practices

Qualifications:

• Relevant certifications such as CISA, CISM, CRISC, CHPC, or equivalent

• Experience working within a publicly traded company and/or a healthcare environment
• Excellent analytical and problem-solving skills
• Strong communication (written and verbal) and interpersonal skills, with the ability to influence and build consensus
• Ability to work independently and collaboratively across diverse teams
• Strong project management, organizational skills, and attention to detail
• Ethical and objective approach to compliance

Benefits

• Salary Range: $130,000-$150,000
• Health Care Plan (Medical, Dental & Vision)
• Retirement Plan (401k, IRA)
• Life Insurance (Basic, Voluntary & AD&D)
• Unlimited PTO Policy
• Paid Holidays
• Short Term & Long Term
• Training & Development