The Senior Compliance Specialist will assist with all matters relating to Information Security compliance. They will support the IT Compliance team with responsibilities including: developing and executing compliance programs (SOC2, HITRUST, HIPAA, GDPR, ISO 27001, ITGC SOX, FedRAMP), leading annual assessments and audits, executing Supply Chain and Third Party Vendor Management Program, and supporting Customer Assurance Program.
They will also provide timely updates and escalations to leadership, manage the GRC tool, perform internal information security risk assessments, and develop recommendations for improvement. Additionally, they will maintain plans, policies, procedures, and standard operating protocols, conduct continuous monitoring activities, support Remediation Tracking, and deliver information security and privacy awareness training.