Senior Lead Cyber Compliance
for section headings like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We must not repeat job title as heading. We must include sections only when posting has real specific content. We have content: About the role (intro paragraph about Labcorp). Work Schedule (full-time, exempt, first shift). Responsibilities (list of bullet points). Minimum Qualifications (Bachelor's degree, 5+ years experience...). Preferred Qualifications (list). Additional Job Standards (list of skills/abilities). Benefits (description). Also maybe Pay? Not provided. So we omit Pay. Also maybe "Qualifications" could combine Minimum and Preferred? But we have separate headings: Requirements, Qualifications, Skills. The instruction: Use headings for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). We need to map content to these headings. We have About the role (intro). Responsibilities (list). Requirements (maybe Minimum Qualifications). Qualifications (maybe Preferred Qualifications). Skills (Additional Job Standards). Benefits (Benefits). Schedule (Work Schedule). We should not include Pay.
We must preserve all substantive information, not invent. Use - for any list of duties/requirements/benefits. Use
for prose.
We need to strip boilerplate: cookie/navigation/legal/EEO etc. Remove duplicated lines. The posting includes repeated intro paragraphs about Labcorp being global leader etc. We need to preserve substantive info but not duplicate. We'll combine unique content.
Let's extract:
Intro: "Labcorp is a global leader in laboratory services, providing the insights and answers that help healthcare providers, patients, researchers, pharmaceutical companies and health systems make confident decisions and improve outcomes. Through our unparalleled science, data, technology and laboratory network, we advance diagnostics, accelerate innovation and help address some of the world’s most important health challenges. As we shape the future of healthcare, we are leveraging advanced technologies, intelligent digital solutions and data-driven innovation across our operations to enhance how work gets done and deliver greater value to customers and patients. With our global scale and deep expertise, you’ll have the opportunity to do meaningful work, grow your career and make a real impact on people’s health around the world. Together, we’re improving health and improving lives. Labcorp is a global leader in diagnostic testing and drug development solutions, helping healthcare providers, researchers, and patients make informed decisions that advance care. Join us in our mission to improve health and improve lives."
That's repetitive but we can keep as prose.
Work Schedule: "This is a full‑time, exempt (salaried) position assigned to a First Shift schedule, with standard business hours of Monday through Friday, 8:00 a.m. to 5:00 p.m. in EDT time zone. Business needs may occasionally require flexibility in work hours, including earlier, later, or additional hours, with reasonable notice provided when possible."
Responsibilities: list bullet points under headings: Framework Strategy & Rationalization, Evidence Management..., Operational Risk Management..., Continuity..., Stakeholder Partnership... Each bullet is a paragraph with multiple sentences. We'll treat each bullet as
- containing the sentences.
Minimum Qualifications: "Bachelor’s Degree. 5 or more years of experience supporting cybersecurity compliance assessments and audits aligned to one or more of the following: SOC Type 2, ISO 27001, NIST SP 800-53, FedRAMP, PCI DSS, SOX ITGCs, and CMMC. 5 or more years of experience coordinating audit evidence and testing with multiple control-owner teams (e.g. security, Engineering, IT, Product, Finance)."
Preferred Qualifications: "5 or more years with operating in post-acquisition or high-change environments with complex stakeholder landscapes. 5 or more years of experience supporting CMMC readiness and/or working with defense-sector security requirements (e.g. SSP/POA&M development, control implementation tracking)."
Additional Job Standards: list: Independent execution and ownership mindset; proactive identification and removal of blockers. Compliance tooling (GRC platforms, ticketing systems, evidence repositories, workflow automation tools). Risk-based prioritization and sound judgment. Experience using AI-enabled tools to improve efficiency and quality in compliance workflows (e.g., drafting policies/procedures, summarizing evidence sets, accelerating RFI responses, mapping controls, identifying gaps). Ability to apply AI responsibly in accordance with confidentiality, data handling, and audit defensibility requirements. Process discipline and attention to detail; strong documentation rigor. Stakeholder management and clear, concise communication across multiple organizational levels. Should be open to travel up to 15% on occasion to assist with on-site audits if needed. Comfortable working within formal governance, change control, and fixed assessment/audit timelines.
Benefits: "Employees regularly scheduled to work 20 or more hours per week are eligible for comprehensive benefits including: Medical, Dental, Vision, Life, STD/LTD, 401(k), Paid Time Off (PTO) or Flexible Time Off (FTO), Tuition Reimbursement and Employee Stock Purchase Plan. Employees regularly scheduled to work less than 20 hours, Casual, Intern, and Temporary employees are only eligible to participate in the 401(k) Plan. Employees who are regularly scheduled to work a 7 on 7 off schedule are eligible to receive all the foregoing benefits except PTO or FTO. For more detailed information, please click here." We should remove the "For more detailed information, please click here." as it's a link/instruction? It's application instruction? It's a link to benefits details; maybe considered boilerplate? It's not EEO but it's a link. Probably we should drop that sentence as it's navigation/link. We'll keep the benefit details.
Now produce HTML:
About the role
... (combined intro)
Work Schedule
... schedule text
Responsibilities
- Framework Strategy & Rationalization Enable strategic alignment and rationalization across SOC2 Type 2, ISO 27001, NIST SP 800-53, PCI DSS, SOX ITGCs, FedRAMP, and CMMC (and related customer/regulatory requirements) to avoid duplicative effort and an unsustainable annual workload.Support transitions between assurance approaches where appropriate (e.g., simplifying overlapping requirements) to meet expectations such as state and sector requirements (including TX-RAMP where applicable).Perform control mapping activities; identifying overlaps, gaps, and efficiency opportunities across standards, internal policies, and contractual obligations.
- Evidence Management, Customer Assurance, and Regulatory Support Preserve consistent, high-quality evidence production for assessments, customer RFIs, and regulatory requirements—reducing execution risk and downstream disruption.Build and maintain a well-governed evidence repository with clear traceability, version control, retention, and audit defensibility aligned to enterprise standards.Coordinate timely, accurate responses to customer security questionnaires and assurance requests in partnership with control owners.
- Operational Risk Management & Issue Lifecycle Maintain effective operational risk management coverage, ensure monitoring, documentation, and issue lifecycle management continue without erosion as scope expands.Track findings, exceptions, risks, and remediation activities; coordinate validation and closure documentation aligned to governance expectations.Support risk reporting and governance cadence (e.g., risk forums, control owner check-ins) with clear status, trends, and escalation points.
- Continuity, Capacity, and Compliance Operations Excellence Mitigate concentration and continuity risk within compliance/GRC by reducing reliance on a single overextended resource for critical audit and risk functions through documentation, process standardization, and repeatable operating routines.Develop scalable compliance artifacts (templates, checklists, playbooks) to improve consistency and reduce rework across cycles.Sustain audit readiness and customer confidence during increased compliance demands and post-acquisition integration complexity.
- Stakeholder Partnership & Enterprise Governance Serve as a primary compliance partner to control owners across Security, Engineering, IT, Legal, and Operations to drive timely evidence production and remediation outcomes.Communicate status, risks, and blockers with precision; independently manage stakeholder follow-ups and escalate issues appropriately to protect timelines and quality.Promote a strong culture of compliance through clear guidance, practical enablement, and consistent expectations for evidence quality.
Requirements
Bachelor’s Degree. 5 or more years of experience supporting cybersecurity compliance assessments and audits aligned to one or more of the following: SOC Type 2, ISO 27001, NIST SP 800-53, FedRAMP, PCI DSS, SOX ITGCs, and CMMC. 5 or more years of experience coordinating audit evidence and testing with multiple control-owner teams (e.g. security, Engineering, IT, Product, Finance).
Qualifications
5 or more years with operating in post-acquisition or high-change environments with complex stakeholder landscapes. 5 or more years of experience supporting CMMC readiness and/or working with defense-sector security requirements (e.g. SSP/POA&M development, control implementation tracking).
Skills
- Independent execution and ownership mindset; proactive identification and removal of blockers.
- Compliance tooling (GRC platforms, ticketing systems, evidence repositories, workflow automation tools).
- Risk-based prioritization and sound judgment.
- Experience using AI-enabled tools to improve efficiency and quality in compliance workflows (e.g., drafting policies/procedures, summarizing evidence sets, accelerating RFI responses, mapping controls, identifying gaps).
- Ability to apply AI responsibly in accordance with confidentiality, data handling, and audit defensibility requirements.
- Process discipline and attention to detail; strong documentation rigor.
- Stakeholder management and clear, concise communication across multiple organizational levels.
- Should be open to travel up to 15% on occasion to assist with on-site audits if needed.
- Comfortable working within formal governance, change control, and fixed assessment/audit timelines.
Benefits
Employees regularly scheduled to work 20 or more hours per week are eligible for comprehensive benefits including: Medical, Dental, Vision, Life, STD/LTD, 401(k), Paid Time Off (PTO) or Flexible Time Off (FTO), Tuition Reimbursement and Employee Stock Purchase Plan. Employees regularly scheduled to work less than 20 hours, Casual, Intern, and Temporary employees are only eligible to participate in the 401(k) Plan. Employees who are regularly scheduled to work a 7 on 7 off schedule are eligible to receive all the foregoing benefits except PTO or FTO.
We should not include Pay section.
Check for any duplicated content: The intro had two similar paragraphs; we combined but might still have duplication. We'll try to deduplicate: The first paragraph: "Labcorp is a global leader in laboratory services, providing the insights and answers that help healthcare providers, patients, researchers, pharmaceutical companies and health systems make confident decisions and improve outcomes. Through our unparalleled science, data, technology and laboratory network, we advance diagnostics, accelerate innovation and help address some of the world’s most important health challenges. As we shape the future of healthcare, we are leveraging advanced technologies, intelligent digital solutions and data-driven innovation across our operations to enhance how work gets done and deliver greater value to customers and patients. With our global scale and deep expertise, you’ll have the opportunity to do meaningful work, grow your career and make a real impact on people’s health around the world. Together, we’re improving health and improving lives."
Second: "Labcorp is a global leader in diagnostic testing and drug development solutions, helping healthcare providers, researchers, and patients make informed decisions that advance care. Join us in our
for prose. We need to strip boilerplate: cookie/navigation/legal/EEO etc. Remove duplicated lines. The posting includes repeated intro paragraphs about Labcorp being global leader etc. We need to preserve substantive info but not duplicate. We'll combine unique content. Let's extract: Intro: "Labcorp is a global leader in laboratory services, providing the insights and answers that help healthcare providers, patients, researchers, pharmaceutical companies and health systems make confident decisions and improve outcomes. Through our unparalleled science, data, technology and laboratory network, we advance diagnostics, accelerate innovation and help address some of the world’s most important health challenges. As we shape the future of healthcare, we are leveraging advanced technologies, intelligent digital solutions and data-driven innovation across our operations to enhance how work gets done and deliver greater value to customers and patients. With our global scale and deep expertise, you’ll have the opportunity to do meaningful work, grow your career and make a real impact on people’s health around the world. Together, we’re improving health and improving lives. Labcorp is a global leader in diagnostic testing and drug development solutions, helping healthcare providers, researchers, and patients make informed decisions that advance care. Join us in our mission to improve health and improve lives." That's repetitive but we can keep as prose. Work Schedule: "This is a full‑time, exempt (salaried) position assigned to a First Shift schedule, with standard business hours of Monday through Friday, 8:00 a.m. to 5:00 p.m. in EDT time zone. Business needs may occasionally require flexibility in work hours, including earlier, later, or additional hours, with reasonable notice provided when possible." Responsibilities: list bullet points under headings: Framework Strategy & Rationalization, Evidence Management..., Operational Risk Management..., Continuity..., Stakeholder Partnership... Each bullet is a paragraph with multiple sentences. We'll treat each bullet as
About the role
... (combined intro)
Work Schedule
... schedule text
Responsibilities
- Framework Strategy & Rationalization Enable strategic alignment and rationalization across SOC2 Type 2, ISO 27001, NIST SP 800-53, PCI DSS, SOX ITGCs, FedRAMP, and CMMC (and related customer/regulatory requirements) to avoid duplicative effort and an unsustainable annual workload.Support transitions between assurance approaches where appropriate (e.g., simplifying overlapping requirements) to meet expectations such as state and sector requirements (including TX-RAMP where applicable).Perform control mapping activities; identifying overlaps, gaps, and efficiency opportunities across standards, internal policies, and contractual obligations.
- Evidence Management, Customer Assurance, and Regulatory Support Preserve consistent, high-quality evidence production for assessments, customer RFIs, and regulatory requirements—reducing execution risk and downstream disruption.Build and maintain a well-governed evidence repository with clear traceability, version control, retention, and audit defensibility aligned to enterprise standards.Coordinate timely, accurate responses to customer security questionnaires and assurance requests in partnership with control owners.
- Operational Risk Management & Issue Lifecycle Maintain effective operational risk management coverage, ensure monitoring, documentation, and issue lifecycle management continue without erosion as scope expands.Track findings, exceptions, risks, and remediation activities; coordinate validation and closure documentation aligned to governance expectations.Support risk reporting and governance cadence (e.g., risk forums, control owner check-ins) with clear status, trends, and escalation points.
- Continuity, Capacity, and Compliance Operations Excellence Mitigate concentration and continuity risk within compliance/GRC by reducing reliance on a single overextended resource for critical audit and risk functions through documentation, process standardization, and repeatable operating routines.Develop scalable compliance artifacts (templates, checklists, playbooks) to improve consistency and reduce rework across cycles.Sustain audit readiness and customer confidence during increased compliance demands and post-acquisition integration complexity.
- Stakeholder Partnership & Enterprise Governance Serve as a primary compliance partner to control owners across Security, Engineering, IT, Legal, and Operations to drive timely evidence production and remediation outcomes.Communicate status, risks, and blockers with precision; independently manage stakeholder follow-ups and escalate issues appropriately to protect timelines and quality.Promote a strong culture of compliance through clear guidance, practical enablement, and consistent expectations for evidence quality.
Requirements
Bachelor’s Degree. 5 or more years of experience supporting cybersecurity compliance assessments and audits aligned to one or more of the following: SOC Type 2, ISO 27001, NIST SP 800-53, FedRAMP, PCI DSS, SOX ITGCs, and CMMC. 5 or more years of experience coordinating audit evidence and testing with multiple control-owner teams (e.g. security, Engineering, IT, Product, Finance).
Qualifications
5 or more years with operating in post-acquisition or high-change environments with complex stakeholder landscapes. 5 or more years of experience supporting CMMC readiness and/or working with defense-sector security requirements (e.g. SSP/POA&M development, control implementation tracking).
Skills
- Independent execution and ownership mindset; proactive identification and removal of blockers.
- Compliance tooling (GRC platforms, ticketing systems, evidence repositories, workflow automation tools).
- Risk-based prioritization and sound judgment.
- Experience using AI-enabled tools to improve efficiency and quality in compliance workflows (e.g., drafting policies/procedures, summarizing evidence sets, accelerating RFI responses, mapping controls, identifying gaps).
- Ability to apply AI responsibly in accordance with confidentiality, data handling, and audit defensibility requirements.
- Process discipline and attention to detail; strong documentation rigor.
- Stakeholder management and clear, concise communication across multiple organizational levels.
- Should be open to travel up to 15% on occasion to assist with on-site audits if needed.
- Comfortable working within formal governance, change control, and fixed assessment/audit timelines.
Benefits
Employees regularly scheduled to work 20 or more hours per week are eligible for comprehensive benefits including: Medical, Dental, Vision, Life, STD/LTD, 401(k), Paid Time Off (PTO) or Flexible Time Off (FTO), Tuition Reimbursement and Employee Stock Purchase Plan. Employees regularly scheduled to work less than 20 hours, Casual, Intern, and Temporary employees are only eligible to participate in the 401(k) Plan. Employees who are regularly scheduled to work a 7 on 7 off schedule are eligible to receive all the foregoing benefits except PTO or FTO.
We should not include Pay section. Check for any duplicated content: The intro had two similar paragraphs; we combined but might still have duplication. We'll try to deduplicate: The first paragraph: "Labcorp is a global leader in laboratory services, providing the insights and answers that help healthcare providers, patients, researchers, pharmaceutical companies and health systems make confident decisions and improve outcomes. Through our unparalleled science, data, technology and laboratory network, we advance diagnostics, accelerate innovation and help address some of the world’s most important health challenges. As we shape the future of healthcare, we are leveraging advanced technologies, intelligent digital solutions and data-driven innovation across our operations to enhance how work gets done and deliver greater value to customers and patients. With our global scale and deep expertise, you’ll have the opportunity to do meaningful work, grow your career and make a real impact on people’s health around the world. Together, we’re improving health and improving lives." Second: "Labcorp is a global leader in diagnostic testing and drug development solutions, helping healthcare providers, researchers, and patients make informed decisions that advance care. Join us in our