--- title: 'Security Compliance Program Manager at CentralReach' canonical: 'https://feeny.ai/job/security-compliance-program-manager-centralreach-holmdel-cqvhnpj08q9c' type: 'job' last_seen: '2026-09-10' --- # Security Compliance Program Manager at CentralReach - **Company:** CentralReach - **Location:** Holmdel, NJ - **Compensation:** $100k–$120k - **Work type:** remote - **Posted:** 2026-08-25 - **Last confirmed live:** 2026-09-10 - **Apply:** https://job-boards.greenhouse.io/centralreach/jobs/4382354009 ## Job description CentralReach is a leading provider of autism and IDD care software for Applied Behavior Analysis (ABA), multidisciplinary therapy, and special education. Trusted by more than 200,000 users, we enable therapy providers, educators, and employers to scale the way they deliver ABA and related therapies with innovative technology, market-leading industry expertise, and world-class customer satisfaction. The Security Compliance Program Manager will own and drive CentralReach’s overall compliance program, working directly with the Chief Compliance Officer and Chief Information Security Officer. Beyond day-to-day maintenance and special projects, this role brings program ownership: translating regulatory and security standards into action plans, building KPIs and reporting cadences for leadership, developing metrics, monitoring, and incident response capabilities in partnership with Information Security and Infrastructure teams, and continually evolving the program’s processes and tooling. Key Accountabilities: - Lead and Manage Third-Party and Internal Audits - SOC 2 Type 2 - HIPAA Attestation - Privacy Audit - Security Audits - Compliance Program Strategy & Implementation - Translate requirements from regulatory and security frameworks (e.g., NIST 800-53, SOC 2, HIPAA) into concrete action items for cross-functional teams - Track progress and communicate compliance rollout status with the teams doing the work - Program Reporting & Communication - Develop KPIs and dashboards to measure compliance program maturity, and report on them regularly to the Chief Compliance Officer and leadership - Partner with Information Security and IT leadership to continually evolve the compliance program - Metrics, Monitoring & Incident Response - Partner with Security and Infrastructure teams to support automated identification, alerting, and response for compliance-relevant risks and incidents - Maintain the compliance/security Incident Response Plan - Support on-call and escalation planning for compliance and security incidents - Compliance Process Development & Tooling - Create, implement, and automate recurring compliance processes, such as account and access reviews and employee onboarding/offboarding checks - Identify and evaluate GRC (governance, risk, and compliance) and compliance management tools to support the program - Projects - Build out the compliance program KPI framework and reporting cadence for leadership - Manage Security and Compliance policy updates - Lead and manage required internal audits - Oversee Vendor Management - Implement security and compliance program - Desired Skills and Experience: - Experience working with auditors through internal and external security and compliance audits - Working knowledge of security and compliance frameworks (e.g., NIST 800-53, SOC 2, HIPAA, ISO 27001) and the ability to translate them into operational action plans - Experience developing KPIs, metrics, and reporting cadences for program and executive leadership - Familiarity with security monitoring, alerting, and incident response concepts - Experience with Business Continuity and Disaster Recovery planning - Process improvement and automation mindset, including experience evaluating and implementing GRC or compliance management tools - Strong cross-functional collaboration and stakeholder management, including with Information Security, Infrastructure, and Legal teams - Proven ability to manage multiple compliance initiatives simultaneously (e.g., audit cycles, risk assessments, policy rollouts) with competing timelines and cross-functional dependencies - Excellent written and verbal communication skills, with demonstrated ability to translate complex regulatory or legal requirements into clear, actionable guidance for non-compliance audiences - Detail-oriented approach to documenting audit findings, risk assessments, or corrective action plans, with follow-through on tracking items to closure - Analytical mindset with a track record of identifying root causes of process or control gaps and recommending sustainable fixes rather than short-term patches Base Salary Range $100,000—$120,000 USD Backed by Roper Technologies, Inc. (Nasdaq: ROP), CentralReach is entering an exciting phase of growth, innovation, and scale. Recognized as one of the best places to work over 10 times by organizations such as Inc, Built In, and NJBIZ, our culture is centered around impact, inclusion, and flexibility. As a hybrid company with collaborative offices in Ft. Lauderdale, FL; Holmdel, NJ; and Verona, Italy, we foster a workplace where top talent can thrive and make a real difference in the lives of those we serve. We offer competitive compensation, comprehensive health benefits, generous PTO, 401(k) matching, and paid parental leave to our full-time employees. Our team members also enjoy hybrid work schedules, career development support, wellness programs, and opportunities to give back through CR Cares™, our community engagement initiative. Be part of a market leader driving the future of care. Explore opportunities at [centralreach.com/careers](https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcentralreach.com%2Fcareers%2F&data=05%7C02%7Cjamie.madarasz%40centralreach.com%7Cb7b1c0d4e2354127669a08dda36f3df3%7C515bdea7d91847b3b73f5700d21635ec%7C0%7C0%7C638846420463140236%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=WNerHqhY5w8%2Fh6TrRUbAh6uyPQJS8ymWAWaKuyJfaHo%3D&reserved=0). Protecting your information is important to us.  Please take a moment to review our Notice of Privacy Practices for Job Applicants. [Applicant-Privacy-Notice-110725](https://centralreach365.sharepoint.com/:b:/s/ApplicantPrivacyNotice/IQBl-WqOdm5oQI9tZ2avE2_7AYJGJ5xXuv-ubvZ989Cf9tk?e=KdZc3m) to understand how we collect, use, store, and protect your personal information during the recruitment process. ## About CentralReach ## Company Overview - **One-liner**: CentralReach provides the #1 AI-powered software platform for autism and intellectual/developmental disability (IDD) care, serving applied behavior analysis (ABA) practices, multidisciplinary clinics, and PreK-12 special education. - **Entity Type**: Private (funding rounds not publicly disclosed) - **Headquarters**: Fort Lauderdale, Florida, USA (with a second office in Holmdel, New Jersey) - **Founded**: 2012 - **Founders**: A practicing Board Certified Behavior Analyst (BCBA) – name not publicly disclosed ## Core Business - **Primary industry**: Healthcare IT / Autism & IDD Care Software - **Target customers**: B2B – ABA therapy providers, multidisciplinary practices, PreK-12 school districts, and employers who support neurodiverse employees. - **Mission or purpose statement**: “Unlock potential in autism and IDD care” – to help children and adults diagnosed with autism and related IDDs, and those who serve them, achieve better outcomes and live more independent lives. ## Products & Services - **CentralReach Platform (All-in-One)** : AI-powered SaaS platform for clinical data collection, scheduling, billing, claims management, and compliance. Includes modules for ABA and multi-disciplinary therapies (speech, occupational therapy). - **cari™ (AI Assistant)**: An AI layer trained on over a billion data points and 40+ BCBA reviews. Provides real-time assistance for note drafting, claim auditing, and scheduling. - **ClaimCheckAI®**: Pre-submission claims auditing tool that reduces denials by catching missing or incorrect information. - **ClaimAcceleratorAI™**: Automates claims checks and intelligently routes clean claims to shorten reimbursement cycles. - **NoteGuardAI™**: Reviews clinical notes for errors, compliance risks, and completeness before submission. - **NoteDraftAI™**: Generates real-time first drafts of session notes from session details to save provider time. - **ScheduleAI®**: Intelligent staff and client scheduling automation that minimizes conflicts and adapts to changing needs. - **CR BillMax**: Revenue cycle management (RCM) service for billing and collections. ## Market Standing - **Valuation/Market Cap**: Not publicly available - **Key Metric**: Over 185,000 professionals trust the platform (as of 2025); 400 total employees. - **Notable Investors/Partners**: Not disclosed (private company) - **Growth Signals**: - Named to Inc. Magazine’s 2025 list of fastest-growing private companies in the Southeast for the 5th time. - Named a Top AI Company of 2025 by the Software Report. - Named a 2025 Best Place to Work in New Jersey. - Won Dual Stevie® Awards in 2025 for People-Focused CEO (Chris Sullens) and AI Technology Breakthrough of the Year (ClaimCheckAI). - User base grew from 115,000 (Built In, 2024) to 185,000+ professionals. ## Competitive Advantages - **Niche focus**: Deep specialization in autism and IDD care, with roots in ABA therapy – a market with high regulatory and compliance demands. - **AI moat**: Proprietary AI (cari) trained on the largest dataset in the industry (1B+ data points) and refined by clinical experts. - **Integrated platform**: Combines clinical, scheduling, billing, and claims in one system, reducing the need for multiple vendors. - **Established trust**: Trusted by 185,000+ professionals and consistently recognized as a top workplace and fastest-growing company. ## Strategic Focus - **AI-driven automation**: Continued investment in AI features to reduce administrative burden and improve clinical outcomes. - **Expanding beyond ABA**: Growing platform capabilities to support multidisciplinary therapies (speech, occupational therapy) and special education. - **Addressing the care gap**: Using technology to scale access to autism and IDD services amid a growing neurodiverse population. ## Why Work Here - **Culture & Mission**: Mission-driven work with a direct impact on the autism and IDD community. Recognized as a Best Place to Work in NJ and by Built In for culture. - **Work Model**: Hybrid work environment – remote-first but with offices in Fort Lauderdale, FL, and Holmdel, NJ. Most roles are remote-eligible within the US. - **Benefits**: - Two robust medical plans, low-cost dental/vision, 24/7 Teladoc, pet insurance, EAP - 401(k) with strong company match, employer HSA contribution, financial advisor access - Generous PTO, paid holidays, extra PTO day for volunteering (CR Cares) - Paid parental leave, family medical leave - Comprehensive onboarding, career pathing, leadership development, quarterly CR Talks sessions - Company charitable match, diversity and inclusion initiatives (mandated unconscious bias training, inclusive hiring) - **Engineering Culture**: Tech stack includes Ruby on Rails, React, React Native, Angular, Node.js, AWS, Kubernetes, Terraform, SQL. Emphasis on career growth and innovation. ## Sources 1. [CentralReach Careers – Culture & Benefits](https://centralreach.com/careers/) 2. [CentralReach About – Company Overview](https://centralreach.com/about/company/) 3. [CentralReach Homepage – Products & AI](https://centralreach.com/) 4. [CentralReach Job Board – Greenhouse](https://job-boards.greenhouse.io/centralreach/jobs/4147040009) 5. [Built In – CentralReach Perks & Culture](https://builtin.com/company/centralreach?base_route_name=entity.node.canonical&overridden_route_name=entity.node.canonical&page_manager_page=node_view&page_manager_page_variant=node_view-panels_variant-0&page_manager_page_variant_weight=-1) ## Other roles at CentralReach - [Sr. Software Engineer, Ruby on Rails](https://feeny.ai/job/sr-software-engineer-ruby-on-rails-centralreach-united-states-43jwx1qwq7s8) — United States - [Enterprise Customer Success Lead](https://feeny.ai/job/enterprise-customer-success-lead-centralreach-united-states-7g656k5k63x7) — United States - [Site Reliability Engineer (SRE), Data Products](https://feeny.ai/job/site-reliability-engineer-sre-data-products-centralreach-holmdel-n3gafc8xmqb5) — Holmdel, NJ - [Clinical Implementation Manager](https://feeny.ai/job/clinical-implementation-manager-centralreach-fort-lauderdale-florida-united-apspzjvz2vqy) — Fort Lauderdale Florida United States Holmdel New Jersey, United States - [Administrative Assistant](https://feeny.ai/job/administrative-assistant-centralreach-holmdel-pa5c72m0zt75) — Holmdel, NJ - [Patient Responsibility, VOB & Authorization Specialist](https://feeny.ai/job/patient-responsibility-vob-authorization-specialist-centralreach-holmdel-2qtkcwgjgt3m) — Holmdel, NJ - [Strategic Business Development Representative](https://feeny.ai/job/strategic-business-development-representative-centralreach-holmdel-new-jersey-5p2v5r8yw691) — Holmdel New Jersey, United States - [Small Business Account Manager](https://feeny.ai/job/small-business-account-manager-centralreach-fort-lauderdale-tvs2z0r2nmw1) — Fort Lauderdale, FL - [Customer Success Lead](https://feeny.ai/job/customer-success-lead-centralreach-fort-lauderdale-florida-united-states-j9s9t7qzb5sa) — Fort Lauderdale Florida United States Holmdel New Jersey, United States - [Strategic Account Executive](https://feeny.ai/job/strategic-account-executive-centralreach-remote-wn03w1xkknej)