Privacy and Compliance Lead

Responsibilities

• Leading/Managing External Audits including MARSe, ARC-AMPE (NIST 800-53 rev5), SOC2 Type2, ISO27001, HITRUST
• Aiding in audit activities – Interfacing with the Auditors, translating audit evidence requests to actual requirements and working with teams to collect and submit the evidence.
• Leading development and execution of new compliance policies and procedures within the organization.
• Conducting Gap Analysis between different frameworks and keeping up with changing compliance requirements and amendments to regulations.
• Evaluating internal operational and procedural compliance.
• Analyzing and updating existing compliance policies and related documentation.
• Providing Privacy requirements to the engineering and business teams

Qualifications

• Compliance Analyst Requirements: At least 6 years of experience leading/managing with Audits, governance, risk and compliance within Information Technology or Information Security.
• Demonstrated leadership in managing audits and compliance across the organization
• Knowledge working with CMS (Center of Medicaid and Medicare Services) Security frameworks like MARSe, ARC-AMPE.
• In-depth knowledge of industry compliance requirements related and standards such as, NIST SP800-53, ISO, and SOC2
• Bachelor’s degree in computer technology, computer security or audit.
• Exceptional ability to formulate and write compliance policies, procedures, and related documentation.
• Advanced analytical, problem solving and continuous improvement abilities.

Skills

• Relevant Security certification (CISA, CISM, CISSP, CRISC)
• Technical Writing
• Bonus - Experience with Security tools, ability to understand architecture Diagrams
• A strategic mindset with the ability to set long term achievable goals
• Leverage Lean Six Sigma or AGILE knowledge (a plus)