Governance and Compliance Consultant

🔥 23 hours ago

🇺🇸 United States – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🚔 Compliance

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Random Bit LLC

WebsiteLinkedInAll Job Openings

11 - 50 employees

💼 Consulting

🏥 Healthcare

🔒 Cybersecurity

Consulting • Healthcare • Cybersecurity

Random Bit LLC is a business and technology partner that specializes in providing actionable solutions for system modernization challenges. They offer a range of services including enterprise and solution architecture, data governance, compliance frameworks, and cloud transformation for both public and private sector clients. With a commitment to integrity and transparency, Random Bit emphasizes a supportive work culture and aims to convert complex challenges into simple, effective solutions.

📋 Description

• Support compliance assessments and audit-readiness activities for CMS ARC-AMPE, HITRUST r2, SSA regulatory compliance audits, and other applicable requirements • Prepare evidence, coordinate with assessors, and respond to findings • Interpret security and compliance requirements and evaluate existing control documentation and implementation • Identify gaps in policies, procedures, standards, and supporting evidence • Review, update, and develop security policies, standards, guidelines, and related documentation • Collaborate with agency security analysts and operational teams to develop, document, and improve security procedures • Identify required objective evidence and evaluate its relevance, completeness, accuracy, and currency • Coordinate with control owners to obtain and maintain supporting artifacts • Maintain mappings between regulatory requirements, security controls, policies, procedures, responsible stakeholders, and objective evidence • Document control and documentation deficiencies, recommend corrective actions, and track remediation activities through resolution • Work with security, infrastructure, cloud, application, data, and business teams to validate control implementation and improve compliance documentation, evidence collection, and assessment processes

🎯 Requirements

• Professional experience in cybersecurity, information security, governance, risk, compliance, IT audit, security architecture, or a closely related discipline • Demonstrated experience interpreting security or compliance requirements and translating them into actionable control, documentation, procedural, or evidence requirements • Experience reviewing, developing, or maintaining information security policies, standards, procedures, and related governance documentation • Experience performing security control assessments, compliance assessments, gap analyses, or audit-readiness activities • Working knowledge of cybersecurity control frameworks and security risk management concepts • Ability to communicate security and compliance requirements effectively to both technical and non-technical stakeholders • Strong written communication skills with the ability to create clear, defensible, and assessment-ready documentation • Strong analytical and organizational skills, including the ability to manage multiple controls, findings, evidence requests, and remediation activities concurrently • Ability to work independently on defined compliance assignments while collaborating effectively with security analysts, technical teams, leadership, auditors, and assessors • Experience supporting state Medicaid, healthcare, government, or another highly regulated environment • Direct experience with CMS ARC-AMPE, HITRUST CSF or HITRUST r2 assessments, SSA regulatory compliance audits, NIST SP 800-53, NIST Cybersecurity Framework, or CMS/Medicaid security and compliance requirements • Familiarity with HITRUST ai2 assessments and associated security and compliance requirements • Experience developing control crosswalks or mapping requirements across multiple security and compliance frameworks • Experience supporting formal audits, third-party assessments, certification activities, or regulatory reviews • Familiarity with cloud and enterprise technology environments sufficient to understand how technical controls are implemented and evidenced • Experience working with security analysts, system owners, application teams, infrastructure teams, cloud teams, and other control owners to document security processes • Familiarity with governance, risk, and compliance tools or structured compliance evidence repositories

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume