Security Engineer II (GRC)
New
I
InnovaccerHealthcare cybersecurity
United States, Willingness to work with teams and customers across the US and Middle-East time zonesFull-TimeMiddle
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- 4-6 years of prior experience in Information Security Risk & Compliance / GRC
- Required Skills
- AWSHIPAA
Requirements
- Have 4-6 years of experience in Information Security Risk & Compliance / GRC.
- Have hands-on experience implementing or assessing HIPAA, SOC 2 Type II, ISO 27001, HITRUST, or similar frameworks.
- Understand security, privacy, risk, governance, and compliance controls.
- Have experience with vendor risk assessment or third-party risk management.
- Have experience responding to RFPs, security questionnaires, customer assessments, and legal/security exhibits.
- Have experience coordinating audit, compliance, and evidence collection activities with internal teams.
- Be familiar with FedRAMP, GovRAMP/StateRAMP, NIST SP 800-53, MARS-E, and ARC-AMPE.
- Understand POA&M, Continuous Monitoring (ConMon), security assessments, authorization processes, SSP, and 3PAO assessment activities.
- Be familiar with GDPR, HITECH, US state privacy/security regulations, and Middle-East privacy regulations including PDPL.
- Be familiar with cloud environments such as AWS, Azure, and/or GCP.
- Have a bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field; preferred.
- Be willing to work with teams and customers across US and Middle-East time zones.
Responsibilities
- Respond to RFPs and security questionnaires, coordinating with RFP, Legal, Privacy, Product, Engineering, and IT teams.
- Perform risk assessments, Business Impact Analysis, business continuity and disaster recovery activities, and tabletop exercises.
- Analyze and update security, privacy, and compliance policies, procedures, and documentation.
- Support implementation of privacy, data protection, and security controls.
- Drive vendor risk assessments and third-party risk management activities.
- Support internal and external audits, including SOC 2 Type II, HIPAA, HITRUST, and ISO 27001 assessments.
- Support FedRAMP, GovRAMP/StateRAMP, NIST SP 800-53, and public-sector compliance initiatives.
- Maintain POA&M, remediation activities, risk registers, and control gaps; support continuous monitoring and evidence collection.
- Coordinate audit and compliance evidence gathering, validation, and presentation with internal teams, 3PAOs, and external auditors.
- Support security and privacy requirements across US healthcare, federal/state, Middle-East, and AI governance programs.
View Full Description & ApplyYou'll be redirected to the employer's site
