Senior IT Compliance Analyst

About the role

The Senior IT Compliance Analyst contributes to achievement of P&L objectives for the business through providing a single point of accountability for IT compliance initiatives within Technology & Operations. This position is responsible for maintaining highly collaborative partnerships with Legal and Technology teams, while developing and implementing compliance programs designed to ensure that company data is protected and compliance program requirements are met for our Healthcare brands.

Responsibilities

- Collaborate with the IT Compliance Manager, Technology & Operations associates, Legal, and HR to align technical and compliance requirements to meet objectives. - Provide expert guidance and recommendations for HIPAA privacy and security rules and other applicable federal and state health care privacy laws. - Lead and facilitate third party audit projects for HIPAA and GDPR. Will be solely responsible for audit project, reporting, assessment, evidence collection and validation. - Contribute to internal and third-party audits such as SOC 2 and CIS assessments as requested. - Work directly with business units and technology partners to convey and drive compliance initiatives. - Perform compliance and security reviews of customer contracts and complete security questionnaires as required. - Assist and coordinate with the Legal team to ensure consistent strategy and implementation of IT compliance requirements. - Provide support during acquisitions and all other IT compliance initiatives as needed.

Requirements

- High school diploma or GED required. Bachelor's degree in Information Security, Information Systems, Information Technology, Computer Science, Engineering, or equivalent work experience preferred. - 5+ years of professional, industry-related experience in IT compliance/security roles - 5+ years’ experience in developing, implementing, and auditing Security & Compliance policies and controls - 3+ years’ experience completing security questionnaires - Demonstrated subject matter expertise in HIPAA assessments and international compliance requirements - Strong understanding of cybersecurity best practices, risks, and mitigations is required - Strong logical, analytical, critical thinking, and problem-solving skills - Highly motivated, driven, proven ability to facilitate the resolution of compliance and security gaps - Excellent interpersonal skills as well as strong verbal and written communication skills; comfortable working with and presenting to colleagues, business partners, or technology leaders - Proactive attitude towards anticipating problems, implementing solutions, and accomplishing goals

Qualifications

- None provided

Skills

- None provided

Benefits

- Flexible and generous paid time off - Competitive medical, dental, vision and life insurance - 401(k) employer matching program - Parental leave - Wellness resources - Charitable matching program - On-site workout facilities (Leawood, Gilbert, Burlington) - Community outreach groups - Tuition reimbursement

Pay

- Details not specified

Schedule

- Hybrid schedule from our office location in Leawood, KS preferred. Remote candidate within the United States will be considered.