Healthcare Regulatory Assurance Lead

The Healthcare Regulatory Assurance Lead, leads regulatory assurance for the Healthcare Vertical, combining governance-and-assurance architecture discipline with hands-on security, risk, and compliance management specific to regulated healthcare environments.

Owns the design and day-to-day operation of the compliance and regulatory-escalation lane within the Healthcare Delivery Assurance Office: HIPAA, HITECH, HITRUST, and related healthcare-specific data-protection and breach-notification obligations, embedded directly into the Deal Gate's regulatory/compliance trigger, the Findings & Assurance Register, and Operational Readiness Review evidence.

The Healthcare Regulatory Assurance Lead represents Rackspace's healthcare regulatory posture to customers, auditors, and certification bodies, and partners closely with Clinical Leadership (CDHO) and partner-sourced clinical informatics to keep the governance surface defensible as the vertical scales.

Work Location: United States of America

- Candidates who live in the San Antonio, TX area will work a hybrid schedule with two days in the office.

- If you are not located near San Antonio, TX, this position may be worked 100% from home.

"Remote postings are limited to candidates residing within the country specified in the posting location."

Sponsorship

- This role is not sponsorship eligible.

- Candidates need to be legally allowed to work in the US for any employer.

- This role is not open to holders of an F-1 OPT visa.

Key Responsibilities

● Owns the regulatory and compliance-escalation lane for the Healthcare Vertical, ensuring HIPAA, HITECH, HITRUST, and related obligations are embedded in delivery, not bolted on after the fact.

● Serves as the named regulatory/compliance reviewer on Deal Gate submissions triggered by regulatory or compliance scope, working to the Healthcare Delivery Assurance Office's 5-working-day turnaround.

● Partners with Clinical Leadership (CDHO) and partner-sourced clinical informatics to validate that non-standard commitments touching PHI, clinical workflow, or regulated data meet healthcare-specific compliance requirements before customer commitment.

● Leads risk assessments, compliance audits, and control testing specific to healthcare accounts, including HIPAA, HITRUST, and breach-notification timeline readiness.

● Acts as the conduit between internal control owners and external auditors or regulators for healthcare-specific accreditation activity, including HITRUST, SOC 2 healthcare scope, and HIPAA audits.

● Maintains and evolves the regulatory and compliance criteria within the Deal Gate Trigger Criteria and Governance Charter as healthcare regulation changes, including PHI-export and new-PHI-flow triggers.

● Reviews findings in the Findings & Assurance Register with regulatory or compliance implications, ensuring remediation plans meet HIPAA/HITRUST obligations and committed breach-notification timelines.

● Provides regulatory evidence and sign-off input into Operational Readiness Reviews for healthcare go-lives.

● Represents Rackspace's healthcare regulatory posture to customer compliance teams, auditors, and certification bodies.

● Maintains expert knowledge of the healthcare regulatory landscape, including HIPAA, HITECH, HITRUST, CMS and ONC interoperability and information-blocking rules, and applicable state health-data-privacy law, advising the Healthcare Delivery Assurance Office and Clinical Leadership on emerging obligations.

● Supports vendor and third-party due diligence for partner-sourced clinical informatics and other healthcare-adjacent vendors.

● Develops training and communication on healthcare-specific regulatory obligations for the Healthcare Delivery Assurance Office and delivery pods.

Knowledge

● Advanced to expert-level knowledge of healthcare-specific compliance regulations and standards: HIPAA, HITECH, HITRUST, 42 CFR Part 2, and CMS/ONC interoperability and information-blocking rules.

● Expert-level knowledge of IT risk management, governance, risk and compliance (GRC), and regulatory audit practice.

● Working knowledge of AI governance and assurance architecture principles, including policy enforcement, provenance, auditability, verification, and release gating, as applied to healthcare data and clinical workflows.

● Knowledge of breach-notification timeline obligations and regulatory escalation paths specific to healthcare data.

Skills

● Risk Assessment/Management

● Audit Skills

● Cybersecurity

● Analytical Skills

● Stakeholder Management (external/internal)

● Process Improvement

● Vendor Management

● Strategic Planning

● Technology Integration

Education

● High School Diploma or regional equivalent required.

● Bachelor's Degree required, preferably in a field related to the role. At the manager's discretion, additional relevant experience may substitute for the degree requirement.

Certifications

● At least TWO required: CISSP, CISM, CISA, CCSP, CRISC, GRCP, CGEIT, or similar security/GRC-based certification.

● Healthcare-specific certification required or in progress: HCISPP (HealthCare Information Security and Privacy Practitioner) or CHPS (Certified in Healthcare Privacy and Security).

● Additional Rackspace product and business-focused certifications desired.

Experience

● 10+ years of experience in IT risk, security, or compliance required.

● A minimum of 5 years of this experience must be focused on healthcare-specific regulatory compliance (HIPAA, HITRUST) within a healthcare provider, payer, or healthcare technology environment.

#LI-Remote

#LI-AW1

Our compensation reflects the cost of labor across several geographic markets. The compensation range for this position ranges from $119,583.00/year in our lowest geographic market up to 175,388.40 USD/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Your recruiter can share more about the specific salary range for your preferred location during the hiring process. The compensation package may also include incentive compensation opportunities in the form of annual bonus or incentives, equity awards and an Employee Stock Purchase Plan (ESPP). Learn more about benefits at Rackspace.

About Rackspace Technology

Rackspace Technology is the trusted operator of the full enterprise AI stack, from governed private cloud to AI inference and agents in production. From edge to core to cloud, we operate the infrastructure, data layer, and software integration to deliver business outcomes with the predictable cost, reliability, security, and compliance that regulated and mission-critical environments demand. We support customers in more than 120 countries with AI capabilities spanning private cloud, public cloud, applications, data and cyber resilience.

More on Rackspace Technology

Though we’re all different, Rackers thrive through our connection to a central goal: to be a valued member of a winning team on an inspiring mission. We bring our whole selves to work every day. And we embrace the notion that unique perspectives fuel innovation and enable us to best serve our customers and communities around the globe. We welcome you to apply today and want you to know that we are committed to offering equal employment opportunity without regard to age, color, disability, gender reassignment or identity or expression, genetic information, marital or civil partner status, pregnancy or maternity status, military or veteran status, nationality, ethnic or national origin, race, religion or belief, sexual orientation, or any legally protected characteristic. If you have a disability or special need that requires accommodation, please let us know.