Senior Healthcare Cybersecurity Consultant

This is a fully remote position, open to applicants in India.

📋 Description

• Carry out HIPAA gap assessments that encompass the Security Rule, Breach Notification Rule, Business Associate requirements, Privacy Governance requirements, and relevant proposed Security Rule modernization criteria.

• Execute HIPAA risk evaluations to identify the ePHI environment, analyze threats and vulnerabilities, assess current safeguards, and generate prioritized risk registers along with treatment recommendations.

• Provide integrated HIPAA Security Assessments that link compliance gaps to organizational risks and develop a cohesive remediation roadmap.

• Offer advisory services focused on HIPAA security programs, which include regular client meetings, oversight of roadmaps, maintenance of risk registers, remediation guidance, and support for policy and procedure templates.

• Facilitate stakeholder interviews and examine client documentation and evidence.

• Present findings to technical, operational, and executive audiences.

• Create professional reports, recommendations, and executive presentations that are practical, concise, and defensible.

⛳️ Requirements

• Extensive experience in healthcare cybersecurity, particularly with HIPAA-regulated organizations or business associates.

• Proven experience in conducting HIPAA compliance assessments, HIPAA security risk analyses, or similar healthcare security consulting projects.

• Broad expertise in cybersecurity assessment, governance, risk, and compliance beyond HIPAA.

• Capability to lead client interviews and working sessions, exhibit sound professional judgment, and manage assigned consulting tasks independently.

• Strong business writing, presentation, facilitation, and executive communication abilities.

• Proficiency in translating regulatory and technical issues into clear business risks, recommendations, and implementation priorities.

• Experience assessing organizations against HITRUST, CIS Controls, or NIST SP 800-171/CMMC is strongly preferred.

• Previous experience in vCISO, GRC, or other security program leadership roles is highly desirable.

• Relevant certifications such as HITRUST CCSFP, CISSP, HCISPP, CISM, CRISC, or CISA are preferred.

• Equivalent healthcare security, risk management, audit, or compliance credentials and substantial equivalent experience will also be taken into account.

🏝️ Benefits

• Opportunity for remote work, with client meetings conducted virtually unless specified otherwise.

• Flexible workload tailored to availability and suitability.

• Project-based assignments available as opportunities present themselves.

• Potential for consideration for a future full-time position based on business needs, individual performance, and mutual interest.