Job Description:
• Assess, implement, manage, and document security controls supporting ExamWorks and subsidiaries’ information security strategy and compliance requirements
• Advocate for an effective security program, including system-wide security analysis, intrusion and vulnerability detection, standards and testing, risk assessment, awareness and education, and policy, standard, and procedure development
• Facilitate HITRUST and SOC2 audit engagements, data/artifact collection, exception remediation, and monitoring
• Respond to client assessments and RFPs
• Conduct vendor risk assessments and reassessments
• Conduct or participate in cross-training sessions with the IT Security team on management and configuration of security tools and technical controls
Requirements:
• College Degree in Computer Science or related field
• 5 years in IT security, risk management, compliance, and audit
• Subject matter expert knowledge and experience on compliance and security framework standards such as SOX, PCI, SOC, NIST, ISO 27001, HITRUST, HIPAA and HITECH
• Experience with coordination of compliance audit processes and IT security risk assessment programs
• Capable of articulating general IT security policies, processes, and technical controls
• Ability to provide insights in controls design, implementation, and deficiency remediation
• Excellent written and verbal communication skills
• Ability to work a regular Monday–Friday standard business hours schedule
• Willingness to travel up to 10%
Benefits:
• Medical insurance
• Vision insurance
• Dental insurance
• Paid time off
• 401k
• Competitive benefits
• Optional work from home