Offer summary

Qualifications:

2-4 years of experience in Governance, Security, IT Risk, and IT Compliance functions., Familiarity with IT policies, procedures, and security frameworks like HITRUST, SOC2, and NIST., Knowledge of technical security concepts including encryption, authentication, and vulnerability management., Strong communication skills to answer customer inquiries clearly and accurately..

Key responsabilities:

Answer customer questions regarding the security program and related questionnaires.

Ensure compliance with data encryption, access controls, and storage policies.

Manage user access permissions and evaluate security tools for compliance enhancement.

Review vendor security agreements and conduct risk assessments.

Job description

This is a remote position.

Overview:
Flexible Schedule, 30 hours per week

Hours do not necessarily have to align perfectly with PST or EST, however some hours should overlap for training and collaboration.

Job Description: Candidates should be comfortable with Information Security concepts to answer questions that we receive from customers around our security program. We receive several questionnaires per week that include questions around security and privacy. Day-to-day deliverables would be to answer questionnaires using trained knowledge (they would be trained thoroughly by our team + be able to refer to knowledge bases and past questionnaires).

Contractor would also help with User Access Reviews and Vendor Risk Management.

Key Tasks & Responsibilities

Answer questions from customers regarding security program
Ensure proper data encryption, access controls, and storage policies
Ensure security policies are understood and followed across departments
Manage user access permissions, roles, and authentication protocols
Evaluate and recommend security tools to enhance protection and compliance
Review vendor security agreements, contracts, and risk assessments

Requirements

Credentials/background

- Experience 2-4 years in a Governance, Security, IT Risk, and IT Compliance function. Should be familiar with:

IT policies & procedures

IT Risk and Controls

Security frameworks: HITRUST, SOC2, NIST, etc.

Vendor Risk Management

User Access Reviews

Technical security concepts such as: Encryption, Authentication (MFA/SSO), Vulnerability Management, Network Security, Audit Logging and Monitoring, Change Management

- Strong ability to answer questions with clarity and accuracy

- Familiarity with Cloud (AWS)

- Effective communicator

Required profile