Senior Security Compliance Analyst

Compliance Management:

• Lead and support customer security audits, ensuring compliance with security frameworks.
• Prepare and manage ISO 27001 audits, including evidence collection and auditor engagement.
• Maintain compliance with HIPAA, NIST CSF, and other regulatory requirements for healthcare data security.

Policy and Documentation:

• Develop and maintain policies, procedures, and security documentation to meet obligations.
• Perform gap analyses and risk assessments to identify compliance risks.
• Manage security governance frameworks to align with industry best practices.

Risk Management:

• Conduct third-party vendor risk assessments, ensuring compliance with security policies.
• Monitor security controls and ensure continuous improvement of security frameworks.
• Assist in defining security metrics and reporting on compliance status to leadership.