Information Systems Security Manager – ISSM

Random Bit LLC

. Support compliance assessments and audit-readiness activities for CMS ARC-AMPE, HITRUST r2, SSA regulatory compliance audits, and other applicable requirements, including evidence preparation, assessor coordination, and responses to findings .

Posted 11/6/2026full-timeRemote • United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity compliance assessments, including the ability to interpret security requirements and develop actionable documentation. Proficient in collaborating with diverse teams to enhance security procedures and ensure audit readiness across regulatory frameworks.

Highest-signal resume keywords

Cybersecurity Compliance AssessmentsSecurity Policy DevelopmentControl Assessment and Gap AnalysisHITRUST r2 ExperienceNIST Cybersecurity Framework Familiarity

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information Security GovernanceRisk ManagementCompliance DocumentationSecurity Control FrameworksAudit-Readiness ActivitiesControl MappingEvidence PreparationRegulatory ComplianceSecurity Procedures ImprovementAnalytical Skills

Soft Skills

Effective CommunicationStrong Written CommunicationOrganizational SkillsCollaborationIndependent Work

Tools & Technologies

Governance, Risk, and Compliance ToolsCompliance Evidence RepositoriesCloud Technology EnvironmentsSecurity Assessment ToolsDocumentation Tools

Industry Keywords

CMS ARC-AMPEHITRUST CSFSSA Regulatory ComplianceNIST SP 800-53Healthcare ComplianceGovernment RegulationsHighly Regulated EnvironmentThird-Party AssessmentsFormal AuditsSecurity Risk Management

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Support compliance assessments and audit-readiness activities for CMS ARC-AMPE, HITRUST r2, SSA regulatory compliance audits, and other applicable requirements, including evidence preparation, assessor coordination, and responses to findings
Interpret security and compliance requirements, evaluate existing control documentation and implementation, and identify gaps in policies, procedures, standards, and supporting evidence
Review, update, and develop security policies, standards, guidelines, and related documentation
Collaborate with agency security analysts and operational teams to develop, document, and improve security procedures reflecting operational practices and control implementation
Identify required objective evidence and evaluate its relevance, completeness, accuracy, and currency
Coordinate with control owners to obtain and maintain supporting artifacts
Maintain mappings between regulatory requirements, security controls, policies, procedures, responsible stakeholders, and objective evidence
Document control and documentation deficiencies, recommend corrective actions, and collaborate with stakeholders to track remediation through resolution
Work with security, infrastructure, cloud, application, data, and business teams to validate control implementation and improve compliance documentation, evidence collection, and assessment processes

Requirements

What you’ll need

Professional experience in cybersecurity, information security, governance, risk, compliance, IT audit, security architecture, or a closely related discipline
Demonstrated experience interpreting security or compliance requirements and translating them into actionable control, documentation, procedural, or evidence requirements
Experience reviewing, developing, or maintaining information security policies, standards, procedures, and related governance documentation
Experience performing security control assessments, compliance assessments, gap analyses, or audit-readiness activities
Working knowledge of cybersecurity control frameworks and security risk management concepts
Ability to communicate security and compliance requirements effectively to both technical and non-technical stakeholders
Strong written communication skills with the ability to create clear, defensible, and assessment-ready documentation
Strong analytical and organizational skills, including the ability to manage multiple controls, findings, evidence requests, and remediation activities concurrently
Ability to work independently on defined compliance assignments while collaborating effectively with security analysts, technical teams, leadership, auditors, and assessors
Preferred: Experience supporting state Medicaid, healthcare, government, or another highly regulated environment
Preferred: Direct experience with CMS ARC-AMPE, HITRUST CSF or HITRUST r2 assessments, SSA regulatory compliance audits, NIST SP 800-53, NIST Cybersecurity Framework, or CMS/Medicaid security and compliance requirements
Preferred: Familiarity with HITRUST ai2 assessments and associated security and compliance requirements
Preferred: Experience developing control crosswalks or mapping requirements across multiple security and compliance frameworks
Preferred: Experience supporting formal audits, third-party assessments, certification activities, or regulatory reviews
Preferred: Familiarity with cloud and enterprise technology environments sufficient to understand how technical controls are implemented and evidenced
Preferred: Experience working with security analysts, system owners, application teams, infrastructure teams, cloud teams, and other control owners to document security processes
Preferred: Familiarity with governance, risk, and compliance tools or structured compliance evidence repositories