Description

Manage compliance activities and regulatory alignment within IT and healthcare environments.

Responsibilities

• Document and evaluate compliance activities while liaising with government agencies.
• Identify risk gaps and policy requirements based on updates to regulatory, statutory, or mandate requirements.
• Analyze, document, and communicate information security concepts to faculty, staff, systems personnel, and external stakeholders.
• Perform compliance research, reporting, and policy development.

Required Skills

• Minimum of five years of experience in Information Security programs and compliance.
• Deep knowledge of HIPAA, GLBA, PCI DSS, CMMC, and FISMA regulations and standards.
• Familiarity with the NIST Cybersecurity Framework, ISO27001-2, and ITIL.
• Experience using GRC tools and MS Office.
• Background in Project Management methodology.
• Bachelor’s degree in Computer Science, Information Systems, Management Information Systems, or a related field.
• Proven ability to research, report, and develop policies within IT and healthcare sectors.
• Strong analytical, critical thinking, and documentation skills.

Preferred Skills

• Certified Risk and Compliance Management Professional (CRCMP), CISSP, CISA, CMMC, PMP, or HCISPP.
• Working knowledge of FERPA, GDPR, and diverse IT architectures.
• Experience with general audit principles and security administration processes.

Key Skills

Education

Bachelor’s degree