Job description
· Reviewing and analyzing IT systems, processes, and data to identify compliance risks
- Developing and implementing policies and procedures to mitigate compliance risks
- Monitoring and reporting on compliance with regulations and standards such as HIPAA, SOC2, ISO: 27001 and HITRUST
- Collaborating with various departments to ensure compliance with internal policies and procedures
- Keeping up to date with changes in regulations and standards and updating policies and procedures as needed
- Conducting regular compliance audits and investigations
- Maintaining compliance documentation and records
- Communicating with management and other stakeholders to provide updates on compliance efforts and to obtain feedback on compliance policies and procedures.
Requirements
- Strong understanding of Cloud resources, processes, and data. Should have a good understanding of how Cloud resources and processes work and how data flows through them.
- Good understanding of Cloud governance principles and tools used to manage the governance. (Azure/AWS)
- Knowledge of industry regulations and standards. Should be familiar with industry regulations and standards such as HIPAA, SOC2, ISO: 27001, and HITRUST and understand the requirements of these regulations and standards.
- Strong analytical skills. Should be able to analyze and evaluate IT systems, processes, and data to identify compliance risks.
- Excellent communication and interpersonal skills. Communicate effectively with management and other stakeholders to provide updates on compliance efforts and to obtain feedback on compliance policies and procedures.
- Strong documentation skills. Should be able to maintain compliance documentation and records in an organized and accurate manner.
- Project management skills. Should be able to manage multiple projects
- Flexibility and adaptability. Should be able to adapt to changes in regulations and standards and update policies and procedures as needed.
- Strong problem-solving skills. Should be able to identify and solve problems related to IT compliance.