Healthcare Regulatory Assurance Lead

The Healthcare Regulatory Assurance Lead, leads regulatory assurance for the Healthcare Vertical, combining governance-and-assurance architecture discipline with hands-on security, risk, and compliance management specific to regulated healthcare environments.

Owns the design and day-to-day operation of the compliance and regulatory-escalation lane within the Healthcare Delivery Assurance Office: HIPAA, HITECH, HITRUST, and related healthcare-specific data-protection and breach-notification obligations, embedded directly into the Deal Gate’s regulatory/compliance trigger, the Findings & Assurance Register, and Operational Readiness Review evidence.

The Healthcare Regulatory Assurance Lead represents Rackspace’s healthcare regulatory posture to customers, auditors, and certification bodies, and partners closely with Clinical Leadership (CDHO) and partner-sourced clinical informatics to keep the governance surface defensible as the vertical scales.

Work Location: United States of America

– Candidates who live in the San Antonio, TX area will work a hybrid schedule with two days in the office.

– If you are not located near San Antonio, TX, this position may be worked 100% from home.

“Remote postings are limited to candidates residing within the country specified in the posting location.”

Sponsorship

– This role is not sponsorship eligible.

– Candidates need to be legally allowed to work in the US for any employer.

– This role is not open to holders of an F-1 OPT visa.

Key Responsibilities

● Owns the regulatory and compliance-escalation lane for the Healthcare Vertical, ensuring HIPAA, HITECH, HITRUST, and related obligations are embedded in delivery, not bolted on after the fact.

● Serves as the named regulatory/compliance reviewer on Deal Gate submissions triggered by regulatory or compliance scope, working to the Healthcare Delivery Assurance Office’s 5-working-day turnaround.

● Partners with Clinical Leadership (CDHO) and partner-sourced clinical informatics to validate that non-standard commitments touching PHI, clinical workflow, or regulated data meet healthcare-specific compliance requirements before customer commitment.

● Leads risk assessments, compliance audits, and control testing specific to healthcare accounts, including HIPAA, HITRUST, and breach-notification timeline readiness.

● Acts as the conduit between internal control owners and external auditors or regulators for healthcare-specific accreditation activity, including HITRUST, SOC 2 healthcare scope, and HIPAA audits.

● Maintains and evolves the regulatory and compliance criteria within the Deal Gate Trigger Criteria and Governance Charter as healthcare regulation changes, including PHI-export and new-PHI-flow triggers.

● Reviews findings in the Findings & Assurance Register with regulatory or compliance implications, ensuring remediation plans meet HIPAA/HITRUST obligations and committed breach-notification timelines.

● Provides regulatory evidence and sign-off input into Operational Readiness Reviews for healthcare go-lives.

● Represents Rackspace’s healthcare regulatory posture to customer compliance teams, auditors, and certification bodies.

● Maintains expert knowledge of the healthcare regulatory landscape, including HIPAA, HITECH, HITRUST, CMS and ONC interoperability and information-blocking rules, and applicable state health-data-privacy law, advising the Healthcare Delivery Assurance Office and Clinical Leadership on emerging obligations.

● Supports vendor and third-party due diligence for partner-sourced clinical informatics and other healthcare-adjacent vendors.

● Develops training and communication on healthcare-specific regulatory obligations for the Healthcare Delivery Assurance Office and delivery pods.

Certifications

● At least TWO required: CISSP, CISM, CISA, CCSP, CRISC, GRCP, CGEIT, or similar security/GRC-based certification.

● Healthcare-specific certification required or in progress: HCISPP (HealthCare Information Security and Privacy Practitioner) or CHPS (Certified in Healthcare Privacy and Security).

● Additional Rackspace product and business-focused certifications desired.