Security Engineer II – GRC

🔥 13 hours ago

🇺🇸 United States – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Innovaccer

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2014

🏥 Healthcare

💼 Consulting

📦 Logistics

💰 $150M Series E on 2021-12

Healthcare • Consulting • Logistics

Innovaccer is a healthcare technology company dedicated to transforming how healthcare information is utilized and accessed. They provide a comprehensive Health Cloud that aims to accelerate digital transformation for providers, payers, and life sciences companies by offering unified healthcare data and analytics. Innovaccer leverages artificial intelligence to automate tasks, process medical data, and generate insights to improve clinical and financial outcomes. Their solutions focus on integrating and optimizing healthcare systems, promoting value-based care, improving patient engagement, and reducing the administrative burden on healthcare providers. Innovaccer's platform supports various healthcare stakeholders through advanced data activation, analytics, and streamlined workflows, striving to improve healthcare delivery and patient care globally.

📋 Description

• Respond to RFPs and security questionnaires • Coordinate with RFP, Legal, Privacy, Product, Engineering, and IT teams on security questionnaires, security exhibits, BAA/MSA/DPA queries, and customer follow-ups • Perform risk assessments, Business Impact Analysis, business continuity/disaster recovery activities, and tabletop exercises • Analyze and update security, privacy, and compliance policies, procedures, and documentation • Support implementation of privacy, data protection, and security controls • Drive vendor risk assessment and third-party risk management activities • Support internal and external audits, including SOC 2 Type II, HIPAA, HITRUST, and ISO 27001 • Support FedRAMP, GovRAMP/StateRAMP, and public-sector compliance initiatives • Support control implementation and assessment aligned with NIST SP 800-53 • Maintain and track POA&M, remediation activities, risk registers, and control gaps • Support Continuous Monitoring activities and audit/assessment evidence collection • Coordinate gathering, validating, and presenting audit and compliance evidence • Support third-party assessments and coordinate with 3PAOs and external auditors • Identify control gaps and weaknesses and formulate action plans • Support security and privacy requirements across US healthcare, federal/state, and Middle-East regulations • Support AI governance and security initiatives, including ISO 42001 and NIST AI RMF

🎯 Requirements

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field preferred • 4-6 years of prior experience in Information Security Risk & Compliance / GRC • Hands-on experience with HIPAA, SOC 2 Type II, ISO 27001, HITRUST, or similar security and compliance frameworks • Strong understanding of security, privacy, risk, governance, and compliance controls • Experience with Vendor Risk Assessment / Third-Party Risk Management • Experience responding to RFPs, security questionnaires, customer assessments, and legal/security exhibits • Experience with audit, compliance, and evidence collection activities • Familiarity with FedRAMP, GovRAMP/StateRAMP, NIST SP 800-53, MARS-E, and ARC-AMPE • Understanding of POA&M, Continuous Monitoring (ConMon), security assessments, authorization processes, SSP, and 3PAO assessment activities • Familiarity with GDPR, HITECH, US state privacy/security regulations, and Middle-East privacy regulations including PDPL • Familiarity with AWS, Azure, and/or GCP • Strong documentation, analytical, communication, and stakeholder-management skills • Ability to work independently, multitask, prioritize, and manage time effectively • Ability to collaborate and communicate with technical and non-technical stakeholders • Willingness to work with teams and customers across US and Middle-East time zones • ISO 27001 LA/LI, CISA, CRISC, or other relevant security and compliance certifications are good to have

🏖️ Benefits

• PTO benefit accrual of 20 days per year • Parental leave • Monetary incentives and rewards and recognition • Medical, dental, and vision benefits • 100% company-sponsored short- and long-term disability insurance • 100% company-sponsored basic life insurance • Discounted legal aid • Discounted pet insurance