ITSS-Risk Management Professional (Security Assessor)

Job Summary

• Evaluate IT controls and systems, including client/endpoints, servers, access management controls, networks, telecommunications systems, and cloud environments/applications.
• Conduct audit review procedures and assess technological infrastructure against HITRUST, NIST, PCI, HIPAA, and other internal security control frameworks.
• Review business processes and identify, assess, and communicate IT controls and audit results to the team.
• Identify and prioritize risks, document findings and recommendations, and work with stakeholders to ensure understanding and mitigation of risks.
• Make decisions on moderately-complex to complex technical issues independently, with significant latitude in determining project objectives and approaches.
• Communicate effectively, both verbally and in writing, with technical subject matter experts and business leadership.

Requirements

• Advanced experience in controls testing, HIPAA compliance, and IT audit (7+ years required).
• Health care domain experience preferred.