FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in Information Security Risk and Compliance, with a strong focus on frameworks such as HIPAA, SOC 2 Type II, and ISO 27001. Proficient in vendor risk assessment, audit support, and compliance documentation across various regulatory environments.
Highest-signal resume keywords
Information Security Risk & ComplianceVendor Risk AssessmentAudit SupportHIPAA ComplianceISO 27001 Certification
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Risk AssessmentBusiness Impact AnalysisSecurity Policy AnalysisCompliance DocumentationContinuous MonitoringControl ImplementationData ProtectionSecurity ControlsThird-Party Risk ManagementSecurity Frameworks
Soft Skills
Analytical SkillsCommunication SkillsStakeholder ManagementTime ManagementCollaboration
Tools & Technologies
AWSAzureGCPNIST SP 800-53FedRAMPGovRAMPSOC 2 Type IIHITRUSTISO 42001GDPR
Certifications & Qualifications
ISO 27001 LA/LICISACRISC
Industry Keywords
Healthcare CompliancePrivacy RegulationsMiddle-East RegulationsAudit Evidence CollectionControl Gaps
Tech Stack
Tools & technologiesAWSAzureCyber SecurityGoogle Cloud Platform
About the role
Key responsibilities & impact- Respond to RFPs and security questionnaires
- Coordinate with RFP, Legal, Privacy, Product, Engineering, and IT teams on security questionnaires, security exhibits, BAA/MSA/DPA queries, and customer follow-ups
- Perform risk assessments, Business Impact Analysis, business continuity/disaster recovery activities, and tabletop exercises
- Analyze and update security, privacy, and compliance policies, procedures, and documentation
- Support implementation of privacy, data protection, and security controls
- Drive vendor risk assessment and third-party risk management activities
- Support internal and external audits, including SOC 2 Type II, HIPAA, HITRUST, and ISO 27001
- Support FedRAMP, GovRAMP/StateRAMP, and public-sector compliance initiatives
- Support control implementation and assessment aligned with NIST SP 800-53
- Maintain and track POA&M, remediation activities, risk registers, and control gaps
- Support Continuous Monitoring activities and audit/assessment evidence collection
- Coordinate gathering, validating, and presenting audit and compliance evidence
- Support third-party assessments and coordinate with 3PAOs and external auditors
- Identify control gaps and weaknesses and formulate action plans
- Support security and privacy requirements across US healthcare, federal/state, and Middle-East regulations
- Support AI governance and security initiatives, including ISO 42001 and NIST AI RMF
Requirements
What you’ll need- Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field preferred
- 4-6 years of prior experience in Information Security Risk & Compliance / GRC
- Hands-on experience with HIPAA, SOC 2 Type II, ISO 27001, HITRUST, or similar security and compliance frameworks
- Strong understanding of security, privacy, risk, governance, and compliance controls
- Experience with Vendor Risk Assessment / Third-Party Risk Management
- Experience responding to RFPs, security questionnaires, customer assessments, and legal/security exhibits
- Experience with audit, compliance, and evidence collection activities
- Familiarity with FedRAMP, GovRAMP/StateRAMP, NIST SP 800-53, MARS-E, and ARC-AMPE
- Understanding of POA&M, Continuous Monitoring (ConMon), security assessments, authorization processes, SSP, and 3PAO assessment activities
- Familiarity with GDPR, HITECH, US state privacy/security regulations, and Middle-East privacy regulations including PDPL
- Familiarity with AWS, Azure, and/or GCP
- Strong documentation, analytical, communication, and stakeholder-management skills
- Ability to work independently, multitask, prioritize, and manage time effectively
- Ability to collaborate and communicate with technical and non-technical stakeholders
- Willingness to work with teams and customers across US and Middle-East time zones
- ISO 27001 LA/LI, CISA, CRISC, or other relevant security and compliance certifications are good to have
Benefits
Comp & perks- PTO benefit accrual of 20 days per year
- Parental leave
- Monetary incentives and rewards and recognition
- Medical, dental, and vision benefits
- 100% company-sponsored short- and long-term disability insurance
- 100% company-sponsored basic life insurance
- Discounted legal aid
- Discounted pet insurance