Privacy and Compliance Lead

This is a fully remote position, open to applicants in California.

📋 Description

• Overseeing and managing external audits, including MARSe, ARC-AMPE (NIST 800-53 rev5), SOC2 Type2, ISO27001, and HITRUST.

• Supporting audit processes by interfacing with auditors, translating requests for audit evidence into actual requirements, and collaborating with teams to gather and submit the necessary evidence.

• Spearheading the development and implementation of new compliance policies and procedures within the organization.

• Performing gap analyses between various frameworks while staying updated on evolving compliance requirements and regulatory amendments.

• Assessing internal operational and procedural compliance.

• Reviewing and revising existing compliance policies and associated documentation.

• Delivering privacy requirements to engineering and business teams.

⛳️ Requirements

• A minimum of 6 years of experience in leading and managing audits, governance, risk, and compliance within the fields of Information Technology or Information Security.

• Proven track record of leadership in managing audits and compliance initiatives across the organization.

• Familiarity with CMS (Center of Medicaid and Medicare Services) security frameworks such as MARSe and ARC-AMPE.

• Comprehensive understanding of industry compliance requirements and standards, including NIST SP800-53, ISO, and SOC2.

• Bachelor’s degree in computer technology, computer security, or a related field in auditing.

• Outstanding ability to develop and articulate compliance policies, procedures, and relevant documentation.

• Strong analytical, problem-solving, and continuous improvement skills.

🏝️ Benefits

• Health insurance.

• Opportunities for professional development.

• Paid time off.