Governance and Compliance Consultant

🕒 Novembro 3

🇺🇸 Estados Unidos – Remoto (EUA)

⏰ Tempo Integral

🟡 Pleno

🟠 Sênior

🚔 Conformidade

👻 Score fantasma 15%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Por que essa pontuação:

• Aberta há 7 dias.
• As vagas desta empresa costumam ser preenchidas em 39 dias.
• Sem salário divulgado.

Candidatar-se

Encontrar Vagas Remotas Similares

Random Bit LLC

SiteLinkedInTodas as Vagas

11 - 50 funcionários

💼 Consultoria

🏥 Saúde

🔒 Cibersegurança

Consulting • Healthcare • Cybersecurity

A Random Bit LLC é uma parceira de negócios e tecnologia que se especializa em fornecer soluções viáveis para desafios de modernização de sistemas. Oferecem uma gama de serviços, incluindo arquitetura empresarial e de soluções, governança de dados, estruturas de conformidade e transformação em nuvem para clientes do setor público e privado. Com um compromisso com a integridade e transparência, a Random Bit enfatiza uma cultura de trabalho de apoio e visa converter desafios complexos em soluções simples e eficazes.

Descrição

• Support compliance assessments and audit-readiness activities for CMS ARC-AMPE, HITRUST r2, SSA regulatory compliance audits, and other applicable requirements • Prepare evidence, coordinate with assessors, and respond to findings • Interpret security and compliance requirements and evaluate existing control documentation and implementation • Identify gaps in policies, procedures, standards, and supporting evidence • Review, update, and develop security policies, standards, guidelines, and related documentation • Collaborate with agency security analysts and operational teams to develop, document, and improve security procedures • Identify required objective evidence and evaluate its relevance, completeness, accuracy, and currency • Coordinate with control owners to obtain and maintain supporting artifacts • Maintain mappings between regulatory requirements, security controls, policies, procedures, responsible stakeholders, and objective evidence • Document control and documentation deficiencies, recommend corrective actions, and track remediation activities through resolution • Work with security, infrastructure, cloud, application, data, and business teams to validate control implementation and improve compliance documentation, evidence collection, and assessment processes

🎯 Requisitos

• Professional experience in cybersecurity, information security, governance, risk, compliance, IT audit, security architecture, or a closely related discipline • Demonstrated experience interpreting security or compliance requirements and translating them into actionable control, documentation, procedural, or evidence requirements • Experience reviewing, developing, or maintaining information security policies, standards, procedures, and related governance documentation • Experience performing security control assessments, compliance assessments, gap analyses, or audit-readiness activities • Working knowledge of cybersecurity control frameworks and security risk management concepts • Ability to communicate security and compliance requirements effectively to both technical and non-technical stakeholders • Strong written communication skills with the ability to create clear, defensible, and assessment-ready documentation • Strong analytical and organizational skills, including the ability to manage multiple controls, findings, evidence requests, and remediation activities concurrently • Ability to work independently on defined compliance assignments while collaborating effectively with security analysts, technical teams, leadership, auditors, and assessors • Experience supporting state Medicaid, healthcare, government, or another highly regulated environment • Direct experience with CMS ARC-AMPE, HITRUST CSF or HITRUST r2 assessments, SSA regulatory compliance audits, NIST SP 800-53, NIST Cybersecurity Framework, or CMS/Medicaid security and compliance requirements • Familiarity with HITRUST ai2 assessments and associated security and compliance requirements • Experience developing control crosswalks or mapping requirements across multiple security and compliance frameworks • Experience supporting formal audits, third-party assessments, certification activities, or regulatory reviews • Familiarity with cloud and enterprise technology environments sufficient to understand how technical controls are implemented and evidenced • Experience working with security analysts, system owners, application teams, infrastructure teams, cloud teams, and other control owners to document security processes • Familiarity with governance, risk, and compliance tools or structured compliance evidence repositories

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo