Employer Industry: Health Technology

Why consider this job opportunity:
- Competitive salary up to $140,000 based on experience and location
- Comprehensive benefits package including health, dental, vision insurance, and mental health resources
- Generous paid time off: 20 days of paid time off, 13 paid holidays, and 8 days of flexible wellness time off
- Opportunity to work with a mission-driven company focused on health and well-being
- Employees receive an Oura Ring plus discounts for friends and family
- Inclusive work environment with a commitment to diversity and equal opportunity

What to Expect (Job Responsibilities):
- Assist with internal and external audits (SOC 2, HIPAA, HITRUST) including evidence collection and remediation tracking
- Draft, update, and maintain security and compliance policies aligned with regulatory requirements
- Collaborate with Product, Engineering, and Privacy teams to assess security risks in product features and changes
- Conduct vendor risk assessments and review client and vendor contracts for compliance requirements
- Perform risk assessments and collaborate with stakeholders to mitigate security and compliance risks

What is Required (Qualifications):
- Minimum of 5 years of experience in GRC, IT compliance, security, or risk management
- Strong understanding of compliance frameworks such as SOC 2, HIPAA, HITRUST, and NIST 800-171
- Familiarity with IT and cloud environments, security controls, and compliance tooling
- Hands-on experience with risk assessments, audits, and compliance reporting
- Excellent communication skills to translate compliance requirements into actionable policies

How to Stand Out (Preferred Qualifications):
- Certifications such as CGRC, CISA, CRISC, CISSP, or equivalent

#HealthTechnology #Compliance #RiskManagement #CareerOpportunity #DiversityAndInclusion

"We prioritize candidate privacy and champion equal-opportunity employment. Central to our mission is our partnership with companies that share this commitment. We aim to foster a fair, transparent, and secure hiring environment for all. If you encounter any employer not adhering to these principles, please bring it to our attention immediately.
We are not the EOR (Employer of Record) for this position. Our role in this specific opportunity is to connect outstanding candidates with a top-tier employer."