Healthcare Regulatory Assurance Lead

Rackspace Technology

. Own regulatory and compliance escalation for the Healthcare Vertical, embedding HIPAA, HITECH, HITRUST, and related obligations into delivery.

Posted 10/19/2026full-timeSan Antonio • Texas • United StatesSenior💰 $119,583 - $175,388 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in healthcare regulatory compliance, particularly with HIPAA, HITECH, and HITRUST, alongside strong skills in risk assessment, audit practices, and stakeholder management. Proven ability to lead compliance initiatives and develop training on regulatory obligations within healthcare environments.

Highest-signal resume keywords

HIPAA ComplianceHITRUST CertificationIT Risk ManagementRegulatory Audit PracticeHealthcare-Specific Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk AssessmentCompliance AuditsCybersecurityAnalytical WorkProcess ImprovementVendor ManagementStrategic PlanningTechnology IntegrationHealthcare Data ManagementRegulatory Escalation

Soft Skills

Stakeholder ManagementCommunicationLeadership

Tools & Technologies

GRC ToolsAudit Management SoftwareHealthcare Compliance Platforms

Certifications & Qualifications

CISSPCISMCISACCSPCRISCGRCPCGEITHCISPPCHPS

Industry Keywords

Healthcare ComplianceRegulatory ObligationsPHI ManagementClinical WorkflowsData Breach NotificationCMS/ONC RulesHealth Data Privacy LawSOC 242 CFR Part 2AI Governance

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Own regulatory and compliance escalation for the Healthcare Vertical, embedding HIPAA, HITECH, HITRUST, and related obligations into delivery.
Serve as regulatory/compliance reviewer on Deal Gate submissions within the Healthcare Delivery Assurance Office's 5-working-day turnaround.
Partner with Clinical Leadership and clinical informatics teams to validate commitments involving PHI, clinical workflows, or regulated data.
Lead healthcare-specific risk assessments, compliance audits, and control testing.
Coordinate with internal control owners and external auditors or regulators for HITRUST, SOC 2 healthcare scope, and HIPAA audits.
Maintain and evolve Deal Gate trigger criteria and Governance Charter as healthcare regulations change.
Review regulatory findings and ensure remediation plans meet HIPAA/HITRUST obligations and breach-notification timelines.
Provide regulatory evidence and sign-off input for healthcare go-live Operational Readiness Reviews.
Represent Rackspace's healthcare regulatory posture to customers, auditors, and certification bodies.
Advise on HIPAA, HITECH, HITRUST, CMS/ONC rules, and state health-data-privacy law.
Support vendor and third-party due diligence for healthcare-related vendors.
Develop training and communications on healthcare regulatory obligations for assurance and delivery teams.

Requirements

What you’ll need

High School Diploma or regional equivalent required.
Bachelor's Degree required; additional relevant experience may substitute for the degree requirement at the manager's discretion.
At least TWO required: CISSP, CISM, CISA, CCSP, CRISC, GRCP, CGEIT, or similar security/GRC-based certification.
Healthcare-specific certification required or in progress: HCISPP or CHPS.
10+ years of experience in IT risk, security, or compliance required.
Minimum 5 years focused on healthcare-specific regulatory compliance (HIPAA, HITRUST) within a healthcare provider, payer, or healthcare technology environment.
Advanced to expert-level knowledge of HIPAA, HITECH, HITRUST, 42 CFR Part 2, and CMS/ONC interoperability and information-blocking rules.
Expert-level knowledge of IT risk management, GRC, and regulatory audit practice.
Working knowledge of AI governance and assurance architecture principles applied to healthcare data and clinical workflows.
Knowledge of healthcare data breach-notification timelines and regulatory escalation paths.
Skills in risk assessment/management, audit, cybersecurity, analytical work, stakeholder management, process improvement, vendor management, strategic planning, and technology integration.
Must be legally allowed to work in the US for any employer.
Not open to holders of an F-1 OPT visa.

Benefits

Comp & perks

Annual bonus or incentives
Equity awards
Employee Stock Purchase Plan (ESPP)
Benefits package (details available through Rackspace)
Equal employment opportunity
Disability or special-needs accommodation