[Remote] Healthcare Regulatory Assurance Lead

Note: The job is a remote job and is open to candidates in USA. Rackspace US, Inc. is hiring a Healthcare Regulatory Assurance Lead to lead regulatory assurance and compliance for its Healthcare Vertical. The role embeds healthcare requirements into delivery governance, leads risk assessments and audits, and represents Rackspace’s healthcare regulatory posture to customers, auditors, and certification bodies.

Responsibilities

• Owns the regulatory and compliance-escalation lane for the Healthcare Vertical, ensuring HIPAA, HITECH, HITRUST, and related obligations are embedded in delivery, not bolted on after the fact
• Serves as the named regulatory/compliance reviewer on Deal Gate submissions triggered by regulatory or compliance scope, working to the Healthcare Delivery Assurance Office's 5-working-day turnaround
• Partners with Clinical Leadership (CDHO) and partner-sourced clinical informatics to validate that non-standard commitments touching PHI, clinical workflow, or regulated data meet healthcare-specific compliance requirements before customer commitment
• Leads risk assessments, compliance audits, and control testing specific to healthcare accounts, including HIPAA, HITRUST, and breach-notification timeline readiness
• Acts as the conduit between internal control owners and external auditors or regulators for healthcare-specific accreditation activity, including HITRUST, SOC 2 healthcare scope, and HIPAA audits
• Maintains and evolves the regulatory and compliance criteria within the Deal Gate Trigger Criteria and Governance Charter as healthcare regulation changes, including PHI-export and new-PHI-flow triggers
• Reviews findings in the Findings & Assurance Register with regulatory or compliance implications, ensuring remediation plans meet HIPAA/HITRUST obligations and committed breach-notification timelines
• Provides regulatory evidence and sign-off input into Operational Readiness Reviews for healthcare go-lives
• Represents Rackspace's healthcare regulatory posture to customer compliance teams, auditors, and certification bodies
• Maintains expert knowledge of the healthcare regulatory landscape, including HIPAA, HITECH, HITRUST, CMS and ONC interoperability and information-blocking rules, and applicable state health-data-privacy law, advising the Healthcare Delivery Assurance Office and Clinical Leadership on emerging obligations
• Supports vendor and third-party due diligence for partner-sourced clinical informatics and other healthcare-adjacent vendors
• Develops training and communication on healthcare-specific regulatory obligations for the Healthcare Delivery Assurance Office and delivery pods

Skills

• Candidates need to be legally allowed to work in the US for any employer
• Advanced to expert-level knowledge of healthcare-specific compliance regulations and standards: HIPAA, HITECH, HITRUST, 42 CFR Part 2, and CMS/ONC interoperability and information-blocking rules
• Expert-level knowledge of IT risk management, governance, risk and compliance (GRC), and regulatory audit practice
• Working knowledge of AI governance and assurance architecture principles, including policy enforcement, provenance, auditability, verification, and release gating, as applied to healthcare data and clinical workflows
• Knowledge of breach-notification timeline obligations and regulatory escalation paths specific to healthcare data
• Risk Assessment/Management
• Audit Skills
• Cybersecurity
• Analytical Skills
• Stakeholder Management (external/internal)
• Process Improvement
• Vendor Management
• Strategic Planning
• Technology Integration
• High School Diploma or regional equivalent required
• Bachelor's Degree required
• At the manager's discretion, additional relevant experience may substitute for the degree requirement
• At least TWO required: CISSP, CISM, CISA, CCSP, CRISC, GRCP, CGEIT, or similar security/GRC-based certification
• Healthcare-specific certification required or in progress: HCISPP (HealthCare Information Security and Privacy Practitioner) or CHPS (Certified in Healthcare Privacy and Security)
• 10+ years of experience in IT risk, security, or compliance required
• A minimum of 5 years of this experience must be focused on healthcare-specific regulatory compliance (HIPAA, HITRUST) within a healthcare provider, payer, or healthcare technology environment
• Preferably in a field related to the role
• Additional Rackspace product and business-focused certifications desired

Benefits

• Candidates who live in the San Antonio, TX area will work a hybrid schedule with two days in the office.
• If you are not located near San Antonio, TX, this position may be worked 100% from home.
• The compensation package may also include incentive compensation opportunities in the form of annual bonus or incentives, equity awards and an Employee Stock Purchase Plan (ESPP).

Company Overview