RemoteLeaf Logo
Log in Sign up

4745-Security Engineer II (GRC)

5 hours, 6 minutes ago
United States
Full-time
Mid Level
Penetration Tester
Cybersecurity
AWS Azure Cybersecurity HIPAA
Apply Now
Innovaccer

Innovaccer

Innovaccer is a top data platform for value-based care, providing unified patient data solutions to revolutionize healthcare outcomes worldwide.

IT Services
1K-5K
Founded 2014
$379M raised
View All Jobs 15

Description

  • Respond to RFPs, security questionnaires, customer assessments, and security or legal exhibits.
  • Coordinate with Legal, Privacy, Product, Engineering, IT, and customers on compliance requirements and follow-ups.
  • Perform risk assessments, business impact analyses, continuity and disaster recovery activities, and tabletop exercises.
  • Maintain security, privacy, and compliance policies, procedures, and documentation.
  • Support privacy, data protection, security control implementation, and regulatory compliance programs.
  • Drive vendor risk assessments and third-party risk management activities.
  • Support SOC 2 Type II, HIPAA, HITRUST, ISO 27001, FedRAMP, GovRAMP/StateRAMP, and other audits and assessments.
  • Maintain POA&Ms, remediation plans, risk registers, control gaps, and continuous monitoring activities.
  • Collect, validate, and present audit evidence while coordinating with external auditors and 3PAOs.
  • Support AI governance initiatives aligned with ISO 42001 and NIST AI RMF.

Requirements

  • Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field preferred.
  • 4–6 years of experience in information security risk, compliance, or GRC.
  • Hands-on experience implementing or assessing HIPAA, SOC 2 Type II, ISO 27001, HITRUST, or similar frameworks.
  • Strong understanding of security, privacy, risk, governance, and compliance controls.
  • Experience with vendor risk assessments and third-party risk management.
  • Experience responding to RFPs, security questionnaires, customer assessments, and security exhibits.
  • Familiarity with FedRAMP, GovRAMP/StateRAMP, NIST SP 800-53, MARS-E, ARC-AMPE, POA&M, ConMon, SSPs, and 3PAO assessments.
  • Knowledge of GDPR, HITECH, US state privacy regulations, and Middle-East regulations including PDPL.
  • Familiarity with AWS, Azure, and/or GCP environments.
  • Strong documentation, analytical, communication, stakeholder-management, prioritization, and multitasking skills; willingness to work across US and Middle-East time zones.
  • ISO 27001 LA/LI, CISA, CRISC, or other relevant certifications preferred.

Benefits

  • 20 days of PTO accrual per year.
  • Parental leave.
  • Medical, dental, and vision insurance.
  • Company-sponsored short- and long-term disability and basic life insurance.
  • Discounted legal aid and pet insurance options.
  • Monetary incentives and recognition programs.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Dijital Team

Senior Governance, Risk & Compliance (GRC) Consultant

Dijital Team 11-50 Internet Software & Services

This cybersecurity risk and assurance role delivers governance, compliance, maturity, AI governance, and data protection assessments for commercial and regulated customers, translating findings into actionable risk and remediation advice.

Sri Lanka Full-time Senior Penetration Tester
1 day, 4 hours ago
TEHORA

Conseiller en sécurité informatique

TEHORA 1-10 Construction & Engineering

TEHORA recherche un conseiller ou une conseillère senior en sécurité informatique pour protéger les actifs informationnels, renforcer la posture de cybersécurité et soutenir la conformité aux normes de l’industrie pour ses clients.

Canada Full-time Senior Penetration Tester
Active Directory Cisco Cybersecurity Encryption Linux Metasploit Network Security Nmap Penetration Testing Wireshark
1 day, 5 hours ago
C-Serv

Senior Consultant - F5 Distributed Cloud (XC)

C-Serv 11-50 Internet Software & Services

C-Serv is hiring a Costa Rica-based, full-time remote F5 Distributed Cloud Engineer to design and deliver secure multi-cloud networking and application protection solutions for global enterprise clients.

Costa Rica Full-time Senior Penetration Tester
Ansible AWS Azure DNS GCP Kubernetes Network Security Terraform
6 days, 5 hours ago
VerTalents

Sr. Offensive Security Consultant (Alpha Group)

VerTalents Internet Software & Services

VerSprite, through VerTALENTS, is seeking a remote U.S.-based Senior Offensive Security Consultant to lead advanced penetration testing, application security, and red team engagements for enterprise clients.

United States Full-time Senior Penetration Tester
Active Directory Android AWS Azure iOS Penetration Testing
1 week, 2 days ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers