Information Security Assurance Advisor

🕒 Setembro 11

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $104.000 - $140.000 / ano

⏰ Tempo Integral

🟡 Pleno

🟠 Sênior

👮‍♂️ Cibersegurança / Engenheiro de Segurança

🦅 Patrocina Visto H1B

Esta empresa já patrocinou vistos H1B no passado.

👻 Score fantasma 16%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

MRO

SiteLinkedInTodas as Vagas

1001 - 5000 funcionários

🏥 Saúde

☁️ SaaS

📋 Conformidade

💰 Series unknown em 2019-11

Healthcare • SaaS • Compliance

A MRO é uma empresa de software de saúde empresarial que fornece uma Plataforma de Intercâmbio de Dados Clínicos (CDXP) e soluções modulares para curar, normalizar e trocar dados clínicos com segurança entre provedores, pagadores, registros e solicitantes de dados clínicos. A MRO ajuda hospitais, sistemas de saúde, práticas ambulatoriais e pagadores a otimizar a liberação de informações, fluxos de trabalho de conformidade, relatórios de qualidade/MIPS, rastreamento de ACO e inteligência clínica conectando-se a centenas de prontuários eletrônicos de saúde (EHRs) distintos, reduzindo a carga administrativa e acelerando a entrega de cuidados focados no paciente. A empresa enfatiza a segurança e a conformidade regulatória e foi reconhecida com prêmios Best in KLAS por Liberação de Informação.

Descrição

• Develop, implement, and maintain information security policies, procedures, controls, and evidence • Lead audit readiness and execution for HITRUST and SOC 2 Type II examinations • Administer audit activities through the Vanta GRC platform • Apply regulations, standards, and industry practices to manage risk, maintain audit readiness, and support compliance • Define, update, and deploy processes across teams in consultation with relevant functions • Identify best practices and drive continuous information security process improvement • Document information security policies and processes and maintain Information Security Management Systems • Perform due diligence for third-party contracts and periodic third-party risk assessments • Drive and complete information security assessments assigned by clients • Manage and support the information security risk management lifecycle • Ensure appropriate treatment of risk, compliance, and assurance from internal and external perspectives • Own and drive the information security incident management program • Coordinate HITRUST readiness and validated assessments and SOC 2 Type II examinations from planning through report issuance • Configure frameworks and controls in Vanta; assign owners; manage policies, documents, evidence, auditor access, requests, findings, and remediation • Maintain a continuously audit-ready control environment across HITRUST and SOC 2 requirements • Drive and continuously improve the phishing simulation program • Drive Business Impact Analysis and Privacy Impact Analysis to determine and update applicable RTOs and RPOs • Design and participate in Business Continuity and Disaster Recovery efforts • Maintain security training materials and conduct training programs • Support departments in collecting security metrics, conducting analysis, and identifying process improvements • Prepare and circulate weekly, monthly, and quarterly reports and present them to Infosec leadership • Keep procedures and playbooks for Infosec sub-teams up to date

🎯 Requisitos

• Flexibility and ability to shift to operational hands-on activities as needed • Ability to conform to shifting priorities, demands, and timelines through analytical and problem-solving capabilities • Client management experience • Excellent communication and presentation skills • Hands-on experience managing at least one complete HITRUST readiness and validated assessment cycle, including scoping, requirement interpretation, evidence validation, assessor coordination, gap remediation, and certification support • Hands-on experience managing at least one complete SOC 2 Type II examination cycle, including control mapping to the AICPA Trust Services Criteria, observation-period evidence, control-owner coordination, sample requests, auditor inquiries, exceptions, complementary user entity controls, subservice organization considerations, remediation, and report review • Practical experience using Vanta to execute audits, including framework and control administration, ownership assignments, system integrations and automated tests, policy and document management, evidence mapping and review, auditor collaboration, issue tracking, remediation workflows, and audit-readiness reporting • Knowledge or work experience with HIPAA, PCI DSS, TX-RAMP, NIST Cybersecurity Framework, and cross-framework control mapping (preferred) • Bachelor's degree in Engineering or Technology (BE/B.Tech.) or an equivalent degree in a related technical field • 6+ years of information security assurance, GRC, compliance, or audit experience, including direct responsibility for coordinating HITRUST and SOC 2 Type II audits and using Vanta to manage controls, evidence, auditor requests, findings, and remediation

🏖️ Benefícios

• Annual cash bonus eligibility • Medical insurance • Dental insurance • Vision insurance • Life insurance • 401(k) plan

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo