4745-Security Engineer II (GRC)

Innovaccer Analytics; United States; On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

PTO 20 days/year

Parental Leave

Rewards & Recognition

Medical, dental, vision insurance

Disability & life insurance

Legal aid & pet insurance

Job summary

Innovaccer seeks a Security Engineer - II (GRC) to drive Governance, Risk & Compliance across healthcare, public sector, and cloud environments. You will manage security questionnaires, audits, and regulatory programs, interfacing with Legal, Privacy, Product, and Engineering teams.

Responsibilities include risk assessments, policy updates, and supporting FedRAMP, HIPAA, SOC 2, and ISO 27001 programs, while coordinating with 3PAOs and auditors.

Qualifications

• Bachelor's degree in IT, CS, Cybersecurity or related field preferred.
• 4–6 years of Information Security Risk & Compliance / GRC experience.
• Hands-on work with HIPAA, SOC 2 Type II, ISO 27001, HITRUST, or similar standards.
• Strong grasp of governance, risk, privacy, and regulatory controls.
• Experience in Vendor Risk Management and audits.

Responsibilities

• Lead security questionnaires, RFPs, and customer security exhibits.
• Coordinate with Legal, Privacy, Product, and IT teams for audits and evidence.
• Perform risk assessments, BIA, BC/DR, and tabletop exercises.
• Maintain and update security/privacy documentation and controls.
• Support audits like SOC 2 Type II, HIPAA, and ISO 27001; assist FedRAMP and GovRAMP efforts.
• Track POA&M, remediation activities, and control gaps; support Continuous Monitoring.

Skills

GRC

HIPAA

SOC 2

ISO 27001

FedRAMP

NIST 800-53

Vendor Risk

Audit Support

Privacy Regulations

Cloud Security

Education

Bachelor's degree in IT/CS/Cybersecurity

Tools

AWS

Azure

GCP

Job description

Engineering at Innovaccer

With every line of code, we accelerate our customers' success, turning complex challenges into innovative solutions. Collaboratively, we transform each data point we gather into valuable insights for our customers. Join us and be part of a team that's turning dreams of better healthcare into reality, one line of code at a time. Together, we're shaping the future and making a meaningful impact on the world.

About the Role

We at Innovaccer are looking for a Security Engineer - II (GRC) who will be responsible for Governance, Risk & Compliance activities within our Cyber Security team across internal, customer, commercial and public-sector environments. This role will encompass Security Questionnaires, RFPs, Vendor Risk Management, Internal and External Audits, Security & Privacy Policies, Regulatory Compliance, Data Security, and Federal/State Compliance Programs. The role will provide exposure to multiple security domains and cloud platforms while supporting Innovaccer's growing healthcare, public-sector, and AI security programs

A Day in the Life

• Responding to RFPs & Security Questionnaires.
• Coordinating with RFP, Legal, Privacy, Product, Engineering, and IT teams on security questionnaires, security exhibits, BAA/MSA/DPA queries, and customer follow-ups
• Experience performing Risk Assessments, Business Impact Analysis (BIA), Business Continuity/Disaster Recovery, and Tabletop Exercises
• Analyzing and updating existing security, privacy, and compliance policies, procedures, and documentation
• Supporting implementation of privacy, data protection, and security controls
• Driving Vendor Risk Assessment & Third-Party Risk Management activities
• Supporting internal and external audits including SOC 2 Type II, HIPAA, HITRUST, ISO 27001, and other applicable frameworks
• Supporting FedRAMP, GovRAMP/StateRAMP, and public-sector compliance initiatives.
• Supporting control implementation and assessment aligned with NIST SP 800-53.
• Maintaining and tracking POA&M, remediation activities, risk registers, and control gaps.
• Supporting Continuous Monitoring (ConMon) activities and audit/assessment evidence collection.
• Coordinating with internal teams for gathering, validating, and presenting audit and compliance evidence.
• Supporting third-party assessments and coordination with 3PAOs and external auditors
• Identifying control gaps/weaknesses and formulating action plans to address them
• Supporting security and privacy requirements across US healthcare, federal/state, and Middle-East regulations.
• Supporting AI governance and security initiatives, including ISO 42001 and NIST AI RMF.

What You Need

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field preferred
• 4-6 years of prior experience in Information Security Risk & Compliance / GRC
• Hands-on experience with implementation or assessment of HIPAA, SOC 2 Type II, ISO 27001, HITRUST, or similar security and compliance frameworks
• Strong understanding of security, privacy, risk, governance, and compliance controls
• Experience with Vendor Risk Assessment / Third-Party Risk Management
• Experience responding to RFPs, security questionnaires, customer assessments, and legal/security exhibits
• Experience working with internal teams for audit, compliance, and evidence collection activities
• Familiarity with US federal and state security and compliance frameworks, including FedRAMP, GovRAMP/StateRAMP, NIST SP 800-53, MARS-E, and ARC-AMPE
• Understanding of POA&M, Continuous Monitoring (ConMon), security assessments, authorization processes, SSP, and 3PAO assessment activities
• Familiarity with GDPR, HITECH, US state privacy/security regulations, and Middle-East privacy regulations including PDPL
• Familiarity with cloud environments such as AWS, Azure, and/or GCP
• Strong documentation, analytical, communication, and stakeholder-management skills
• Able to work independently, multitask, prioritize, and manage time effectively
• Collaborates effectively and communicates efficiently with technical and non-technical stakeholders
• Willingness to work with teams and customers across the US and Middle-East time zones
• Good to have ISO 27001 LA/LI, CISA, CRISC, or other relevant security and compliance certifications.

Here’s What We Offer

• Generous PTO Benefits: Enjoy PTO benefit accrual of 20 days per year.
• Parental Leave: Experience one of the industry's best parental leave policies to spend time with your new addition.
• Rewards & Recognition: Unlock your potential and be rewarded generously with both monetary incentives and widespread recognition for your dedication and outstanding performance.
• Insurance Benefits: We offer medical, dental, and vision benefits along with 100% company-sponsored short and long-term disability and basic life insurance.
• Legal aid and pet insurance options are available at a discounted rate.

Innovaccer is an equal-opportunity employer.

We cel