4745-Security Engineer II (GRC)

Engineering at Innovaccer With every line of code, we accelerate our customers' success, turning complex challenges into innovative solutions. Collaboratively, we transform each data point we gather into valuable insights for our customers. Join us and be part of a team that's turning dreams of better healthcare into reality, one line of code at a time. Together, we're shaping the future and making a meaningful impact on the world. About The Role We at Innovaccer are looking for a Security Engineer - II (GRC) who will be responsible for Governance, Risk & Compliance activities within our Cyber Security team across internal, customer, commercial and public-sector environments. This role will encompass Security Questionnaires, RFPs, Vendor Risk Management, Internal and External Audits, Security & Privacy Policies, Regulatory Compliance, Data Security, and Federal/State Compliance Programs. The role will provide exposure to multiple security domains and cloud platforms while supporting Innovaccer's growing healthcare, public-sector, and AI security programs A Day in the Life Responding to RFPs & Security Questionnaires. Coordinating with RFP, Legal, Privacy, Product, Engineering, and IT teams on security questionnaires, security exhibits, BAA/MSA/DPA queries, and customer follow-upsExperience performing Risk Assessments, Business Impact Analysis (BIA), Business Continuity/Disaster Recovery, and Tabletop ExercisesAnalyzing and updating existing security, privacy, and compliance policies, procedures, and documentationSupporting implementation of privacy, data protection, and security controlsDriving Vendor Risk Assessment & Third-Party Risk Management activitiesSupporting internal and external audits including SOC 2 Type II, HIPAA, HITRUST, ISO 27001, and other applicable frameworksSupporting FedRAMP, GovRAMP/StateRAMP, and public-sector compliance initiativesSupporting control implementation and assessment aligned with NIST SP 800-53Maintaining and tracking POA&M, remediation activities, risk registers, and control gapsSupporting Continuous Monitoring (ConMon) activities and audit/assessment evidence collectionCoordinating with internal teams for gathering, validating, and presenting audit and compliance evidenceSupporting third-party assessments and coordination with 3PAOs and external auditorsIdentifying control gaps/weaknesses and formulating action plans to address themSupporting security and privacy requirements across US healthcare, federal/state, and Middle-East regulationsSupporting AI governance and security initiatives, including ISO 42001 and NIST AI RMF. What You Need Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field preferred4-6 years of prior experience in Information Security Risk & Compliance / GRCHands-on experience with implementation or assessment of HIPAA, SOC 2 Type II, ISO 27001, HITRUST, or similar security and compliance frameworksStrong understanding of security, privacy, risk, governance, and compliance controlsExperience with Vendor Risk Assessment / Third-Party Risk ManagementExperience responding to RFPs, security questionnaires, customer assessments, and legal/security exhibitsExperience working with internal teams for audit, compliance, and evidence collection activitiesFamiliarity with US federal and state security and compliance frameworks, including FedRAMP, GovRAMP/StateRAMP, NIST SP 800-53, MARS-E, and ARC-AMPEUnderstanding of POA&M, Continuous Monitoring (ConMon), security assessments, authorization processes, SSP, and 3PAO assessment activitiesFamiliarity with GDPR, HITECH, US state privacy/security regulations, and Middle-East privacy regulations including PDPLFamiliarity with cloud environments such as AWS, Azure, and/or GCPStrong documentation, analytical, communication, and stakeholder-management skillsAble to work independently, multitask, prioritize, and manage time effectivelyCollaborates effectively and communicates efficiently with technical and non-technical stakeholdersWillingness to work with teams and customers across the US and Middle-East time zonesGood to have ISO 27001 LA/LI, CISA, CRISC, or other relevant security and compliance certifications We offer competitive benefits to set you up for success in and outside of work. Here's What We Offer Generous PTO Benefits: Enjoy PTO benefit accrual of 20 days per yearParental Leave: Experience one of the industry's best parental leave policies to spend time with your new additionRewards & Recognition: Unlock your potential and be rewarded generously with both monetary incentives and widespread recognition for your dedication and outstanding performance. Insurance Benefits: We offer medical, dental, and vision benefits along with 100% company-sponsored short and long-term disability and basic life insurance. Legal aid and pet insurance options are available at a discounted rate Innovaccer is an equal-opportunity employer. We celebrate diversity, and we are committed to fostering an inclusive and diverse workplace where all employees, regardless of race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, marital status, or veteran status, feel valued and empowered. Disclaimer: Innovaccer does not charge fees or require payment from individuals or agencies for securing employment with us. We do not guarantee job spots or engage in any financial transactions related to employment. If you encounter any posts or requests asking for payment or personal information, we strongly advise you to report them immediately to our HR department at px@innovaccer.com. Additionally, please exercise caution and verify the authenticity of any requests before disclosing personal and confidential information, including bank account details.