Governance, Risk, and Compliance Specialist

This is a fully remote position, open to applicants in Netherlands, +1 more state.

📋 Description

• Develop and execute comprehensive security compliance programs.

• Utilize Vanta to oversee existing security certifications and requirements.

• Manage extensive risk management frameworks.

• Design and uphold security policies, procedures, and guidelines.

• Continuously evaluate and enhance security strategies.

• Ensure alignment with organizational objectives and regulatory requirements.

• Maintain compliance with HIPAA, SOC 2, ISO 27001, C5, DSP Toolkit, Cyber Essentials, and HITRUST.

• Conduct risk assessments and vulnerability evaluations.

• Prepare compliance documentation and reports.

• Support both external and internal audit processes.

• Monitor and implement regulatory changes.

• Perform assessments of security vulnerabilities.

• Develop and execute security control frameworks.

• Monitor and analyze security incidents and breaches.

• Design and deliver security awareness training programs.

• Oversee access control and identity management systems.

• Evaluate and recommend security technologies and solutions.

• Develop and maintain incident response plans.

• Coordinate responses to security incidents.

• Conduct post-incident analyses and implement preventive measures.

• Maintain documentation and reporting of incidents.

• Collaborate with IT, Legal, Compliance, and Clinical teams.

• Provide security guidance that supports the Security by Design concept.

• Facilitate cross-functional security awareness and training initiatives.

• Assist in technology implementation and promote security best practices.

⛳️ Requirements

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, or a related field, or equivalent experience.

• Master’s degree or advanced security certifications preferred, such as CISSP, CISM, or CRISC.

• 3–5 years of progressive experience in security compliance within healthcare, medical technology, or highly regulated industries.

• Proven ability to develop and implement security strategies.

• Experience with regulatory compliance in complex environments.

• Advanced knowledge of security frameworks and compliance standards.

• Proficiency in security tools and technologies.

• Experience with risk assessment and management tools.

• Excellent verbal and written communication and interpersonal skills.

• Capacity to convey complex security concepts to varied audiences, including senior management.

• High degree of integrity and confidentiality.

• Ability to work remotely.

• Willingness to travel approximately 10% of the time.

• Capability to drive a vehicle and utilize other forms of transportation.

• Ability to occasionally lift up to 10 pounds.

🏝️ Benefits

• Ability to work remotely.

• Reasonable accommodations may be provided to enable individuals with disabilities to perform essential job functions.