Governance and Compliance Consultant

Random Bit LLC

. Support compliance assessments and audit-readiness activities for CMS ARC-AMPE, HITRUST r2, SSA regulatory compliance audits, and other applicable requirements .

Posted 11/3/2026full-timeRemote • United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity compliance assessments, including CMS ARC-AMPE, HITRUST r2, and SSA regulatory audits. Proficient in developing and maintaining security policies, conducting gap analyses, and effectively communicating compliance requirements to diverse stakeholders.

Highest-signal resume keywords

Cybersecurity Compliance AssessmentsSecurity Policy DevelopmentHITRUST r2 AssessmentsNIST SP 800-53 FrameworkAnalytical Skills

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Compliance AssessmentsSecurity Control AssessmentsGap AnalysesDocumentation DevelopmentControl MappingRegulatory Requirements InterpretationEvidence CollectionSecurity Risk ManagementAudit-Readiness ActivitiesGovernance Documentation

Soft Skills

Strong Written CommunicationOrganizational SkillsCollaborationAnalytical SkillsEffective Communication

Tools & Technologies

Governance, Risk, and Compliance ToolsCompliance Evidence RepositoriesCloud Technology EnvironmentsSecurity Frameworks

Industry Keywords

CMS ARC-AMPEHITRUST CSFSSA Regulatory ComplianceHealthcare ComplianceMedicaid Security RequirementsHighly Regulated Environment

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Support compliance assessments and audit-readiness activities for CMS ARC-AMPE, HITRUST r2, SSA regulatory compliance audits, and other applicable requirements
Prepare evidence, coordinate with assessors, and respond to findings
Interpret security and compliance requirements and evaluate existing control documentation and implementation
Identify gaps in policies, procedures, standards, and supporting evidence
Review, update, and develop security policies, standards, guidelines, and related documentation
Collaborate with agency security analysts and operational teams to develop, document, and improve security procedures
Identify required objective evidence and evaluate its relevance, completeness, accuracy, and currency
Coordinate with control owners to obtain and maintain supporting artifacts
Maintain mappings between regulatory requirements, security controls, policies, procedures, responsible stakeholders, and objective evidence
Document control and documentation deficiencies, recommend corrective actions, and track remediation activities through resolution
Work with security, infrastructure, cloud, application, data, and business teams to validate control implementation and improve compliance documentation, evidence collection, and assessment processes

Requirements

What you’ll need

Professional experience in cybersecurity, information security, governance, risk, compliance, IT audit, security architecture, or a closely related discipline
Demonstrated experience interpreting security or compliance requirements and translating them into actionable control, documentation, procedural, or evidence requirements
Experience reviewing, developing, or maintaining information security policies, standards, procedures, and related governance documentation
Experience performing security control assessments, compliance assessments, gap analyses, or audit-readiness activities
Working knowledge of cybersecurity control frameworks and security risk management concepts
Ability to communicate security and compliance requirements effectively to both technical and non-technical stakeholders
Strong written communication skills with the ability to create clear, defensible, and assessment-ready documentation
Strong analytical and organizational skills, including the ability to manage multiple controls, findings, evidence requests, and remediation activities concurrently
Ability to work independently on defined compliance assignments while collaborating effectively with security analysts, technical teams, leadership, auditors, and assessors
Experience supporting state Medicaid, healthcare, government, or another highly regulated environment
Direct experience with CMS ARC-AMPE, HITRUST CSF or HITRUST r2 assessments, SSA regulatory compliance audits, NIST SP 800-53, NIST Cybersecurity Framework, or CMS/Medicaid security and compliance requirements
Familiarity with HITRUST ai2 assessments and associated security and compliance requirements
Experience developing control crosswalks or mapping requirements across multiple security and compliance frameworks
Experience supporting formal audits, third-party assessments, certification activities, or regulatory reviews
Familiarity with cloud and enterprise technology environments sufficient to understand how technical controls are implemented and evidenced
Experience working with security analysts, system owners, application teams, infrastructure teams, cloud teams, and other control owners to document security processes
Familiarity with governance, risk, and compliance tools or structured compliance evidence repositories