CarepathRx · 6 hours ago

Information Security Compliance Analyst

OH - Remote

Full-time

Onsite

Mid Level

3+ years exp

Maximize your interview chances

DeliveryHealth Care

No H1B

Insider Connection @CarepathRx

Discover valuable connections within the company who might provide insights and potential referrals.
Get 3x more responses when you reach out via email instead of LinkedIn.

Responsibilities

Support and maintain compliance initiatives for frameworks such as NIST CSF, HITRUST, and other relevant standards.

Assist in the development, implementation, and refinement of policies, procedures, and controls to meet regulatory and business requirements.

Prepare and facilitate audits, certifications, and assessments, serving as a liaison between internal teams and external auditors.

Conduct risk assessments to identify, analyze, and mitigate information security risks across the organization.

Monitor and manage risks associated with third-party vendors, ensuring alignment with organizational policies and security standards.

Maintain and update risk management documentation, including risk registers and mitigation plans.

Assist in developing and maintaining incident response and disaster recovery plans.

Participate in testing and evaluation of incident response and disaster recovery exercises, ensuring lessons learned are documented and addressed.

Partner with business units, IT teams, and legal to ensure compliance with applicable laws, regulations, and contractual obligations.

Educate and train employees on security policies, standards, and best practices.

Create and present reports to leadership on compliance and risk management activities.

Monitor changes in regulatory and compliance landscapes to ensure the organization stays ahead of emerging requirements.

Identify areas of improvement within existing security and compliance processes and propose innovative solutions.

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Information SecurityCompliance ManagementRisk AssessmentNIST CSFHITRUSTCISSPCISACRISCHITRUST CCSFPISO 27001Risk Management Documentation