Information Security Assurance Advisor

🕒 il y a 1 mois

🇺🇸 États-Unis – Télétravail

💵 $104 000 - $140 000 / an

⏰ Temps Plein

🟡 Intermédiaire

🟠 Senior

👮‍♂️ Cybersécurité / Ingénieur Sécurité

🦅 Parrain de Visa H1B

Cette entreprise a parrainé des visas H1B par le passé.

👻 Score fantôme 8%

Ce que ça veut dire : la probabilité que cette offre reste ouverte sans recrutement actif.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

MRO

Site WebLinkedInTous les Emplois

1001 - 5000 employés

🏥 Santé

☁️ SaaS

📋 Conformité

💰 Series unknown en 2019-11

Healthcare • SaaS • Compliance

MRO est une entreprise de logiciels de santé qui offre une plateforme d'échange de données cliniques (CDXP) et des solutions modulaires pour organiser, normaliser et échanger en toute sécurité des données cliniques entre les fournisseurs de soins, les assureurs, les registres et les demandeurs de données cliniques. MRO aide les hôpitaux, les systèmes de santé, les pratiques ambulatoires et les assureurs à rationaliser les flux de travail de divulgation d'informations, de conformité, de reporting de qualité/MIPS, de suivi des ACO, et d'intelligence clinique en se connectant à des centaines de dossiers de santé électroniques disparates, réduisant ainsi la charge administrative et accélérant la délivrance de soins centrés sur le patient. L'entreprise met l'accent sur la sécurité et la conformité réglementaire et a été reconnue par les prix « Best in KLAS » pour la divulgation d'informations.

Description

• Develop, implement, and maintain information security policies, procedures, controls, and evidence • Lead audit readiness and execution for HITRUST and SOC 2 Type II examinations • Administer audit activities through the Vanta GRC platform • Apply regulations, standards, and industry practices to manage risk, maintain audit readiness, and support compliance • Define, update, and deploy processes across teams in consultation with relevant functions • Identify best practices and drive continuous information security process improvement • Document information security policies and processes and maintain Information Security Management Systems • Perform due diligence for third-party contracts and periodic third-party risk assessments • Drive and complete information security assessments assigned by clients • Manage and support the information security risk management lifecycle • Ensure appropriate treatment of risk, compliance, and assurance from internal and external perspectives • Own and drive the information security incident management program • Coordinate HITRUST readiness and validated assessments and SOC 2 Type II examinations from planning through report issuance • Configure frameworks and controls in Vanta; assign owners; manage policies, documents, evidence, auditor access, requests, findings, and remediation • Maintain a continuously audit-ready control environment across HITRUST and SOC 2 requirements • Drive and continuously improve the phishing simulation program • Drive Business Impact Analysis and Privacy Impact Analysis to determine and update applicable RTOs and RPOs • Design and participate in Business Continuity and Disaster Recovery efforts • Maintain security training materials and conduct training programs • Support departments in collecting security metrics, conducting analysis, and identifying process improvements • Prepare and circulate weekly, monthly, and quarterly reports and present them to Infosec leadership • Keep procedures and playbooks for Infosec sub-teams up to date

🎯 Exigences

• Flexibility and ability to shift to operational hands-on activities as needed • Ability to conform to shifting priorities, demands, and timelines through analytical and problem-solving capabilities • Client management experience • Excellent communication and presentation skills • Hands-on experience managing at least one complete HITRUST readiness and validated assessment cycle, including scoping, requirement interpretation, evidence validation, assessor coordination, gap remediation, and certification support • Hands-on experience managing at least one complete SOC 2 Type II examination cycle, including control mapping to the AICPA Trust Services Criteria, observation-period evidence, control-owner coordination, sample requests, auditor inquiries, exceptions, complementary user entity controls, subservice organization considerations, remediation, and report review • Practical experience using Vanta to execute audits, including framework and control administration, ownership assignments, system integrations and automated tests, policy and document management, evidence mapping and review, auditor collaboration, issue tracking, remediation workflows, and audit-readiness reporting • Knowledge or work experience with HIPAA, PCI DSS, TX-RAMP, NIST Cybersecurity Framework, and cross-framework control mapping (preferred) • Bachelor's degree in Engineering or Technology (BE/B.Tech.) or an equivalent degree in a related technical field • 6+ years of information security assurance, GRC, compliance, or audit experience, including direct responsibility for coordinating HITRUST and SOC 2 Type II audits and using Vanta to manage controls, evidence, auditor requests, findings, and remediation

🏖️ Avantages

• Annual cash bonus eligibility • Medical insurance • Dental insurance • Vision insurance • Life insurance • 401(k) plan