Healthcare GRC & Audit Readiness Consultant

Random Bit; Oregon; Hybrid; USD 90,000 - 130,000; Full time

Job summary

Random Bit is seeking a Governance and Compliance Consultant to support cybersecurity governance, risk, and compliance efforts across CMS ARC-AMPE, HITRUST r2, SSA audits and regulatory assessments. You will translate requirements into actionable documentation, control expectations, and evidence while guiding remediation efforts.

The role collaborates with security, IT, data, and business teams to ensure assessment readiness and continuous improvement of controls and evidence repositories in a

Qualifications

• Experience in cybersecurity governance, risk, and compliance (GRC).
• Ability to translate requirements into control, documentation, and evidence.
• Proven track record in policy/standards development and audit readiness.
• Strong communication to both technical and non-technical stakeholders.

Responsibilities

• Support compliance assessments and audit-ready activities for CMS ARC-AMPE, HITRUST r2, SSA audits.
• Interpret requirements and identify gaps in policies, standards, and evidence.
• Review and develop security policies, standards, and related documentation.
• Collaborate with teams to document and improve security procedures.
• Identify objective evidence requirements and coordinate with owners to collect artifacts.
• Maintain mappings between requirements, controls, and evidence for demonstrations.
• Document deficiencies and support remediation activities.
• Work with security, infrastructure, cloud, and business teams to improve processes.

Skills

Security governance

Risk assessment

Policy development

Documentation

Stakeholder communication

Analytical skills

Job description

Random Bit is seeking a Governance and Compliance Consultant to support cybersecurity governance, risk, and compliance efforts across CMS ARC-AMPE, HITRUST r2, SSA audits and regulatory assessments. You will translate requirements into actionable documentation, control expectations, and evidence while guiding remediation efforts.

The role collaborates with security, IT, data, and business teams to ensure assessment readiness and continuous improvement of controls and evidence repositories in a