Information Security Administrator

This is a fully remote position, open to applicants in United States.

📋 Description

• Create, manage, and revise security policies, procedures, standards, plans, and control documentation.

• Execute control testing and gap analysis in compliance with NIST SP 800-53 Rev. 5, HIPAA/HITECH, CMS ARS, and PIM.

• Record deficiencies and oversee the lifecycle of the POA&M until verified closure.

• Address Known Exploited Vulnerabilities (KEVs), CCIC bulletins, and compliance data requests.

• Sustain the control evidence library and GRC platform records, including control mappings and compliance reporting via CFACTs.

• Deliver operational evidence for annual independent assessments and CMS evaluations.

• Assist in the preparation of security assessments and the development of security assessment reports.

• Ensure ongoing audit readiness on a day-to-day basis.

• Execute vendor security due diligence and assessments.

• Conduct reviews of contracts and controls, continuous monitoring, and risk reporting.

• Oversee vendor security questionnaires and continuous compliance verification.

• Manage SMM platform documentation, audit tasks, and training initiatives.

• Collaborate with application owners or assist PMO coordination for SMM activities.

• Aid in application ID management and controls.

• Produce and audit Lenel access control reports on a weekly and monthly basis.

• Carry out group audits and access evaluations.

• Facilitate training and onboarding processes.

• Utilize SharePoint and PowerApps to enhance workflows and reporting.

• Engage in change control boards and assess applications and technical solutions.

• Lead small-scale projects and initiatives, contribute to business development and growth, and provide cross-functional support.

• Assist the SafeGuard Services team in data analysis, investigations, and medical reviews to prevent fraud, waste, and abuse in Medicare/Medicaid programs.

⛳️ Requirements

• 2 years of experience with a BS/BA or 6 years with a high school diploma/equivalent.

• Experience in Security Administration.

• Flexibility to work varying hours.

• Knowledge in security governance, risk, and compliance (GRC), third-party risk management, audit support, and data protection.

• Proficiency in conducting control assessments and gap analyses in line with NIST SP 800-53 Rev. 5.

• Experience in managing the POA&M lifecycle.

• Background in vendor and application security risk management.

• Ability to draft policies, control narratives, and deficiency documentation that can withstand external scrutiny.

• Strong analytical and problem-solving abilities.

• Excellent communication skills and capability to collaborate with stakeholders.

• US citizenship is required.

• A Bachelor’s degree in Computer Science or Software Engineering is preferred.

• Familiarity with HIPAA/HITECH is preferred.

• Experience with CMS requirements and Authority to Connect/Operate support, including SAWs, security assessment reports, and control evidence packages is preferred.

• Experience in compliance environments regulated by the government is preferred.

• SharePoint administration and PowerApps development experience is preferred.

• Practical incident response experience in regulated settings is preferred.

• Familiarity with artificial intelligence (AI), Robotic Process Automation (RPA), or Large Language Models (LLM) is preferred.

🏝️ Benefits

• Medical insurance.

• Dental insurance.

• Vision insurance.

• Life insurance.

• Health savings account.

• Short-term disability.

• Long-term disability.

• Employee assistance program (EAP).

• Parental leave.

• 401(k) plan.

• Paid time off (PTO) for vacation.

• Company-paid holidays.

• Eligible employees may qualify for overtime.

• Shift differential.

• Discretionary bonus.