HIPAA Subject Matter Expert (Cybersecurity)

TL;DR

HIPAA Subject Matter Expert (Cybersecurity): Reviewing security and privacy complaints and auditing healthcare organizations to ensure HIPAA Security Rule compliance with an accent on technical sufficiency assessments and regulatory reporting. Focus on evaluating penetration tests, vulnerability assessments, and aligning security programs with NIST standards.

Location: Remote (Must be based in the US to obtain required customer clearance)

Salary: $125k – $135k

Company

A holding company with multiple subsidiaries providing technology, health, and consulting services to the US federal government and commercial enterprises.

What you will do

• Review security and privacy complaints, data breach notifications, and cybersecurity incident reports to determine HIPAA non-compliance.
• Evaluate the technical sufficiency of submissions from covered entities, including penetration tests, vulnerability assessments, and digital forensics.
• Develop detailed written technical security analyses and root cause reports with recommendations for the OCR.
• Provide subject matter expertise on health information privacy policies and the implementation of the HIPAA Security Rule.
• Advise on risk analyses, incident response, security architecture, and business continuity planning.
• Design and manage information security and data protection programs based on HIPAA requirements.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Sciences, or a comparable field.
• Must be able to obtain and maintain the required customer clearance for access to systems, facilities, and equipment.
• Proven experience in auditing and generating technical audit reports.
• Knowledge of NIST national security standards and HIPAA implementation specifications.
• Ability to communicate complex technical information to non-technical personnel effectively.
• Fundamental knowledge of basic systems analysis and computer security protocols.

Nice to have

• Industry certifications such as CISSP, CISM, CIPP, or CIPT.
• Ten (10) years of relevant cybersecurity experience.

Culture & Benefits

• Comprehensive health insurance (Medical, Dental, Vision) starting from the first day of hire.
• 401(k) with immediate vesting.
• Paid Time Off and observance of 11 Federal Holidays.
• Professional development and training assistance.
• Family Planning, Fertility Assistance, and Legal Aid programs.