Freelance WordPress Consultant, Security, HIPAA Compliance

This is a fully remote position, open to applicants in United States.

📋 Description

• Conduct an audit of WordPress configurations, hosting services, plugins, forms, integrations, tracking tools, and user permissions.

• Detect any gaps in HIPAA compliance, privacy, and security concerning PHI management, encryption, access controls, backups, logging, and third-party vendors.

• Evaluate risks associated with CRMs, analytics platforms, email services, payment processors, APIs, and form builders.

• Examine the overall security posture of the website and identify any vulnerabilities or misconfigurations.

• Deliver a succinct audit report detailing findings, risk assessments, and prioritized remediation actions.

⛳️ Requirements

• Extensive experience in WordPress security and technical audits.

• Practical experience in HIPAA compliance for healthcare or regulated websites.

• Understanding of website privacy, consent management, data retention, and third-party risk management.

• Knowledgeable about OWASP standards, SSL/TLS, firewalls, malware scanning, backups, and least-privilege access principles.

• Excellent communication and documentation abilities.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Opportunities for professional development and continuous learning.

• Flexible work hours and remote work options.

• Collaborative and supportive team environment.