FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in Security Governance, Risk, and Compliance (GRC) with a strong focus on NIST SP 800-53 Rev. 5 compliance, vendor security risk management, and policy documentation. Proficient in using SharePoint and PowerApps for workflow optimization and reporting.
Highest-signal resume keywords
Security Governance, Risk, And Compliance (GRC)NIST SP 800-53 Rev. 5 Control AssessmentVendor Security Risk ManagementPolicy Authoring And DocumentationSharePoint Administration And PowerApps Development
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Control TestingGap AnalysisPOA&M Lifecycle ManagementAudit SupportData ProtectionIncident ResponseArtificial Intelligence (AI)Robotic Process Automation (RPA)Large Language Models (LLM)Compliance Reporting
Soft Skills
Analytical SkillsProblem-Solving SkillsCommunication SkillsStakeholder CollaborationFlexibility
Tools & Technologies
CFACTsSMM PlatformSharePointPowerAppsLenel Access Control
Industry Keywords
HIPAAHITECHCMS RequirementsGovernment Regulated ComplianceThird-Party Risk Management
Tech Stack
Tools & technologiesRPA
About the role
Key responsibilities & impact- Author, maintain, and update security policies, procedures, standards, plans, and control documentation
- Perform control testing and gap analysis against NIST SP 800-53 Rev. 5, HIPAA/HITECH, CMS ARS, and PIM
- Document deficiencies and manage the POA&M lifecycle through verified closure
- Respond to Known Exploited Vulnerabilities (KEVs), CCIC bulletins, and compliance data calls
- Maintain the control evidence library and GRC platform records, control mappings, and compliance reporting using CFACTs
- Provide operational-side evidence for annual independent assessments and CMS reviews
- Support security assessment preparation and security assessment report development
- Maintain day-to-day audit readiness
- Conduct vendor security due diligence and assessments
- Perform contract and control reviews, continuous monitoring, and risk reporting
- Manage vendor security questionnaires and ongoing compliance verification
- Administer SMM platform documentation, audit activities, and training programs
- Liaise with application owners or support PMO coordination for SMM activities
- Support application ID administration and controls
- Generate and audit Lenel access control reports weekly and monthly
- Conduct group audits and access reviews
- Support training and onboarding activities
- Use SharePoint and PowerApps to streamline workflows and reporting
- Participate in change control boards and evaluate applications and technical solutions
- Lead small projects and initiatives, support business capture and growth, and provide cross-functional support
- Support the SafeGuard Services team, which performs data analysis, investigation, and medical review to combat fraud, waste, and abuse in Medicare/Medicaid programs
Requirements
What you’ll need- 2 years with BS/BA or 6 years with a HS diploma/equivalent
- Security Administration experience
- Ability to work flexible hours
- Experience in security governance, risk, and compliance (GRC), third-party risk management, audit support, and data protection
- Experience performing control assessment and gap analysis against NIST SP 800-53 Rev. 5
- Experience managing the POA&M lifecycle
- Vendor and application security risk management experience
- Ability to author policies, control narratives, and deficiency documentation that withstands external review
- Strong analytical and problem-solving skills
- Excellent communication and stakeholder collaboration abilities
- US citizenship required
- Bachelor's degree in Computer Science or Software Engineering (desired)
- Working knowledge of HIPAA/HITECH (desired)
- Experience with CMS requirements and Authority to Connect/Operate support, including SAWs, security assessment reports, and control evidence packages (desired)
- Experience in government regulated compliance environments (desired)
- SharePoint administration and PowerApps development experience (desired)
- Hands-on incident response experience in regulated environments (desired)
- Experience with artificial intelligence (AI), Robotic Process Automation (RPA), or Large Language Models (LLM) (desired)
Benefits
Comp & perks- Medical insurance
- Dental insurance
- Vision insurance
- Life insurance
- Health savings account
- Short-term disability
- Long-term disability
- Employee assistance program (EAP)
- Parental leave
- 401(k)
- Paid time off (PTO) for vacation
- Company paid holidays
- Eligible employees may be eligible for overtime
- Shift differential
- Discretionary bonus
