Tech Stack

Description

You will lead FedRAMP and healthcare compliance efforts, developing policies, managing continuous monitoring, and coordinating audits. You'll work cross-functionally to implement security controls with a risk-based approach, ensuring systems meet regulatory requirements.

Requirements

• 3-5 years information security experience with compliance focus
• Experience with FedRAMP, NIST 800-53, HIPAA, SOC 2, ISO 27001
• CISSP, CISM, or AWS Certified Security preferred
• Working knowledge of CrowdStrike, Qualys, AWS Security services
• Scripting experience in Python and Bash

Responsibilities

• Develop and maintain FedRAMP policies and controls
• Support FedRAMP compliance, including SSP and evidence gathering
• Manage continuous monitoring program and POA&Ms
• Collaborate with internal teams and third-party assessors for audits
• Conduct risk assessments and third-party risk assessments