Compliance Program Manager

• Implement security and compliance program
• Desired Skills and Experience: Experience working with auditors through internal and external security and compliance audits Working knowledge of security and compliance frameworks (e.g., NIST 800-53, SOC 2, HIPAA, ISO 27001) and the ability to translate them into operational action plans Experience developing KPIs, metrics, and reporting cadences for program and executive leadership Familiarity with security monitoring, alerting, and incident response concepts Experience with Business Continuity and Disaster Recovery planning Process improvement and automation mindset, including experience evaluating and implementing GRC or compliance management tools Strong cross-functional collaboration and stakeholder management, including with Information Security, Infrastructure, and Legal teams Proven ability to manage multiple compliance initiatives simultaneously (e.g., audit cycles, risk assessments, policy rollouts) with competing timelines and cross-functional dependencies Excellent written and verbal communication skills, with demonstrated ability to translate complex regulatory or legal requirements into clear, actionable guidance for non-compliance audiences Detail-oriented approach to documenting audit findings, risk assessments, or corrective action plans, with follow-through on tracking items to closure Analytical mindset with a track record of identifying root causes of process or control gaps and recommending sustainable fixes rather than short-term patches
• Experience working with auditors through internal and external security and compliance audits
• Working knowledge of security and compliance frameworks (e.g., NIST 800-53, SOC 2, HIPAA, ISO 27001) and the ability to translate them into operational action plans
• Experience developing KPIs, metrics, and reporting cadences for program and executive leadership
• Familiarity with security monitoring, alerting, and incident response concepts
• Experience with Business Continuity and Disaster Recovery planning
• Process improvement and automation mindset, including experience evaluating and implementing GRC or compliance management tools
• Strong cross-functional collaboration and stakeholder management, including with Information Security, Infrastructure, and Legal teams
• Proven ability to manage multiple compliance initiatives simultaneously (e.g., audit cycles, risk assessments, policy rollouts) with competing timelines and cross-functional dependencies
• Excellent written and verbal communication skills, with demonstrated ability to translate complex regulatory or legal requirements into clear, actionable guidance for non-compliance audiences
• Detail-oriented approach to documenting audit findings, risk assessments, or corrective action plans, with follow-through on tracking items to closure
• Analytical mindset with a track record of identifying root causes of process or control gaps and recommending sustainable fixes rather than short-term patches

Backed by Roper Technologies, Inc. (Nasdaq: ROP), and led by award-winning CEO Chris Sullens, CentralReach is entering an exciting phase of growth, innovation, and scale.

Recognized as one of the best places to work over 10 times by organizations such as Inc, Built In, and NJBIZ, our culture is centered around impact, inclusion, and flexibility.

As a hybrid company with collaborative offices in Ft.

Lauderdale, FL; Holmdel, NJ; and Verona, Italy, we foster a workplace where top talent can thrive and make a real difference in the lives of those we serve.

We offer competitive compensation, comprehensive health benefits, generous PTO, 401(k) matching, and paid parental leave to our full-time employees.

Our team members also enjoy hybrid work schedules, career development support, wellness programs, and opportunities to give back through CR Cares™, our community engagement initiative.

Be part of a market leader driving the future of care.

Explore opportunities at centralreach.com/careers .

Protecting your information is important to us.

Please take a moment to review our Notice of Privacy Practices for Job Applicants.

Applicant-Privacy-Notice-110725 to understand how we collect, use, store, and protect your personal information during the recruitment process.