Remote Security and Compliance Engineer

Description:

• Assess and develop the company’s security compliance requirements and roadmap.
• Maintain and update security documentation and policies regularly.
• Conduct risk assessments and communicate findings effectively.
• Respond to customer security questions, concerns, and requests for proposals (RFPs).
• Ensure annual compliance with SOC2 standards and maintain a roadmap for achieving HITRUST certification.
• Manage relationships with vendors and auditors related to SOC2 and other security audits.
• Recommend security software, policy frameworks, and best practices to enhance the company’s security posture.
• Collaborate with cross-functional teams to implement security pipelines and ensure security best practices are followed across all infrastructures.

Requirements:

• Minimum of 2 years of experience in security and/or compliance roles.
• Strong experience with security and compliance in AWS environments.
• Proven track record in implementing security pipelines.
• Hands-on experience with security engineering and compliance, particularly within the SOC2 and/or HITRUST frameworks.
• Experience with FedRAMP is preferred.
• Deep understanding of security best practices and the ability to implement them across complex infrastructures.
• Experience in the healthcare or medical industry is highly desirable.

Benefits:

• Competitive salary and benefits package.
• Opportunity to work remotely.
• Chance to make a significant impact on the company's security compliance efforts.
• Collaborative work environment with cross-functional teams.
• Professional development opportunities in the security and compliance field.