Description

Evaluate security controls and processes to ensure compliance with CMS, IRS, and SCC standards.

This role is on-site.

Responsibilities

• Assess current security controls against regulatory standards and identify remediation steps to close gaps.
• Develop and update security policies, procedures, and documentation to meet evolving requirements.
• Design and implement assessment workflows and scoring models to evaluate vendor and partner security postures.
• Test operational and management controls through interviews, document reviews, and direct observation.
• Analyze audit findings and present reports on risk exposure and recommended mitigation strategies.

Required Skills

• 8+ years of experience in audit and compliance, information security, or information technology.
• 4+ years of experience in information security control audit and assessment.
• 4+ years of experience working with NIST 800-53 or similar security frameworks.
• 4+ years of experience performing testing, analysis, reporting, and developing remediation plans.
• 2+ years of experience developing and updating security policies and procedures.
• Experience evaluating vendor compliance regarding information sharing and data sharing agreements.
• Ability to support continuous monitoring and incident response programs.

Preferred Skills

• 2+ years of experience in the healthcare, health insurance, or ACA industry.
• Industry recognized certification such as CISA, CIA, GSNA, or CISSP.

Key Skills

Education

Any Gradute