About Leap

Leap is one of the fastest-growing benefits solutions and a category-defining pioneer in employer specialty pharmacy. We are reshaping how life-changing therapies are delivered and financed, ensuring patients get the treatment they need while employers finally get a fair deal.

Specialty drugs and infusions represent nearly 10% of all healthcare spend and are the fastest-growing cost category for employers. Leap tackles this challenge with a novel approach: eliminating hidden markups, expanding access to high-quality infusion providers, and bringing clarity and fairness to how therapies are priced and paid for.

We’re proud to partner with numerous Fortune 500 companies and leading TPAs. Each patient we serve creates immediate ROI: lower costs, improved access, and better care. Join us as we redefine what’s possible in specialty care.

About the Role

Leap is hiring a Senior Manager, Security & Compliance to lead the next phase of our security program. We have an established foundation, including SOC 2 Type II and HIPAA-aligned controls. Now we’re looking for a leader to shape where the program goes next and own the work of getting there, starting with HITRUST certification.

This is a hands-on builder role. You’ll set the direction for our security and compliance program and do much of the work yourself: running audits and certifications, writing policies, reviewing controls, and completing security questionnaires. You’ll also be trusted with the judgment calls that matter most, including the security obligations Leap commits to, the vendors and tools we adopt, and how new controls roll out across the company.

You’ll represent Leap with client and partner security teams when it counts, but the core of the job is building and maintaining a program strong enough to make those conversations easy. You’ll work closely with Engineering, Operations, and our go-to-market teams, and you’ll manage our external security partner.

This is an individual contributor role for an ambitious, highly autonomous security leader who thrives on building end-to-end and driving strategic impact.

What You'll Accomplish

Lead our compliance program

• Run HITRUST certification from kickoff through completion next year, including gap assessment, control mapping, remediation, and assessor management.

• Own SOC 2 Type II end to end, including evidence collection, the auditor relationship, and closing gaps.

• Maintain our HIPAA security and privacy controls, core policies, and BAA obligations.