Job Description

KEY RESPONSIBILITIES: 

• Manage clients’ Information Security policies and procedures. This includes creating and updating policies and procedures on an annual basis or as needed; publishing and communicating with appropriate departments of policy updates.
• Assisting the Security Program Manager with the buildout of an Enterprise GRC tool to house Policies and Procedures in relation to various frameworks including HITRUST, SOC, and HIPAA.
• Responsible for generation of training, policy and procedure and other governance, risk and compliance metrics.
• Performs periodic testing of process that are executed to achieve compliance with Information Security policies and procedures. Testing will also include specific HITRUST requirements and in- depth testing of intricate plans (i.e. Incident Response).
• Performs audit and certification support for HITRUST, SOC1, SOC2 and HIPAA Risk Assessment
• Provides responses to client security questionnaires and maintains a repository of data with standard answers (Standard Information Gathering – SIG).
• Other related duties as assigned

• 
  Bachelor’s degree in Cyber Security (or) related degree and experience
• Healthcare and Healthcare claims experience preferred
• Strong written communication skills especially in the area of policies and procedures.
• Excellent Customer service skills. Experience in interacting with clients to present security related material.
• Three years’ experience in Information Security or Information Technology
• Three years of experiencing creating documentation, policies and/or procedures
• Strong understanding of the Microsoft Office products for data manipulation and reporting
• Ability to effectively prioritize and execute tasks in a high-pressure environment
• Ability to manage multiple work streams simultaneously