[Hiring] HiTrust Auditor @System Soft Technologies

Role Description

• Lead and perform HITRUST readiness assessments, validated assessments, and certification engagements.
• Evaluate security, privacy, and compliance controls against the HITRUST CSF framework.
• Conduct interviews, documentation reviews, and control testing procedures.
• Assess compliance with industry standards and regulations including:
  • HITRUST CSF
  • HIPAA
  • NIST Cybersecurity Framework
  • ISO 27001
  • PCI-DSS
  • Other applicable privacy and security frameworks
• Prepare assessment workpapers, reports, and supporting documentation.
• Identify control gaps, risks, and remediation recommendations.
• Collaborate with client stakeholders, security teams, and management throughout assessment engagements.
• Stay current with evolving cybersecurity threats, regulatory requirements, and industry best practices.
• Provide guidance and subject matter expertise related to security, privacy, governance, risk, and compliance.

Qualifications

• Bachelor's degree in Information Security, Cybersecurity, Information Systems, Computer Science, Accounting, or a related field.
• Experience in IT Audit, Information Security, Cybersecurity, Risk Management, or Compliance.
• Hands-on experience with HITRUST assessments and the HITRUST CSF framework.
• Strong knowledge of security and compliance frameworks such as HIPAA, NIST, ISO 27001, and PCI-DSS.
• Experience performing security control testing and audit procedures.
• Excellent analytical, communication, and report-writing skills.

Requirements

• Candidates should hold at least one of the following certifications:
  • CISA (Certified Information Systems Auditor)
  • CISSP (Certified Information Systems Security Professional)
  • CPA (Certified Public Accountant)
  • QSA (Qualified Security Assessor)
  • AQSA (Associate Qualified Security Assessor)
  • OSCP (Offensive Security Certified Professional)
  • ISO 27001 Lead Auditor
  • HITRUST CCSFP (preferred)

Preferred Experience

• Experience within healthcare, life sciences, insurance, or highly regulated industries.
• Experience supporting compliance initiatives and external audits.
• Strong understanding of governance, risk, and compliance (GRC) programs.
• Consulting or public accounting firm experience is a plus.