HIPAA Compliance Assessor/Consultant (Remote, Part-Time)

TestPros; United States; Remote; USD 69,000 - 117,000; Part time

Benefits offered by this job

Flexible hours

Remote work

Job summary

TestPros is seeking a HIPAA Compliance Assessor/Consultant to support independent HIPAA compliance assessments for websites, apps, or platforms, focusing on minors’ data handling. This is a part-time consulting role with flexible hours on a 1099 or Corp-to-Corp basis.

Ideal candidates have 5+ years in HIPAA assessments, knowledge of NIST 800-66, CSF crosswalk, and HITRUST, and proven privacy audit experience. Remote work within the United States is possible.

Qualifications

• 5+ years of experience with HIPAA assessments and reporting.
• 5+ years of experience with HIPAA guidelines (NIST SP 800-66 Rev. 2; CSF crosswalk; HITRUST).
• Hands-on privacy assessments, audits, and DPIA/PIA.
• Strong understanding of data flows and data lifecycle in web/mobile apps.
• Experience reviewing consumer-facing systems and privacy controls.

Responsibilities

• Identify ePHI locations across systems.
• Identify threats and vulnerabilities and assess safeguards.
• Assess and report on current security measures.
• Determine likelihood and impact of breaches.
• Document findings and propose risk mitigations.

Skills

HIPAA assessments

HIPAA guidelines (NIST 800-66)

Privacy assessments

Data flows & lifecycle

Regulatory translation

Consumer-facing systems review

Education

CIPP/CIPM/CISM or similar certifications

Job description

TestPros delivers innovative independent IT assessment solutions to critical challenges facing the nation and the world. We support the U.S. Federal Government and Commercial clients within the continental USA. TestPros is dedicated to making lives better, safer and more secure.

Overview

Focus: HIPAA Assessment and Consultation
Start: Future projects late 2026 or 2027 (not an immediate job opening)
Type: Part-time consulting
We are seeking a HIPAA Compliance Assessor / Consultant to support independent assessments of HIPAA compliance. This role will evaluate how websites, apps, or platforms collect, use, and protect user data, with a focus on minors/children.

Key Responsibilities

• Identify Electronic Protected Health Information (ePHI): Locate all systems holding sensitive data.
• Identify Threats and Vulnerabilities: Determine potential, reasonably anticipated threats.
• Assess Security Measures: Evaluate current safeguards.
• Determine Likelihood and Impact: Evaluate the probability and impact of potential breaches.
• Document and Prioritize Findings: Create the formal report and risk mitigation plan.

Required Skills / Experience

• 5+ years of experience with HIPAA Assessments and Reporting
• 5+ years of experience with HIPAA guidelines, such as:
  • NIST Special Publication 800-66 Rev. 2: Implementing the HIPAA Security Rule
  • NIST Cyber Security Framework to HIPAA Security Rule Crosswalk
  • Health Information Trust Alliance (HITRUST)
• Hands-on experience conducting:
  • Privacy assessments / audits
  • PIA / DPIA
• Strong understanding of:
  • Data flows & data lifecycle
  • User data handling in web/mobile applications
• Experience reviewing:
  • Consumer-facing systems (apps, websites)
  • Consent, transparency, and privacy controls
• Ability to translate regulations into practical findings and recommendations

Nice to Have

• Background in GRC, cybersecurity, or product compliance
• Certifications such as:
  • CIPP, CIPM, CISM, or similar

Work Setup

• Part-time (consulting basis)
• 1099 or Corp-to-Corp
• Flexible hours
• Project-based (initial assessment engagement)

Rate

Rate: $50-85/hr (1099 or Corp. to Corp.)This range represents a good-faith estimate and is not a guarantee; final compensation is determined by factors such as experience, qualifications, and government contract labor rate requirements and may fall outside the stated range.

Equal Opportunity Employer

TestPros is an equal-opportunity employer and does not discriminate in employment based on race, color, religion, sex (including pregnancy and gender identity), national origin, political affiliation, sexual orientation, marital status, disability, genetic information, age, membership in an employee organization, retaliation, parental status, military service, or any other non-merit factor.

Offer Considerations

TestPros considers several factors when extending an offer, including but not limited to, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, geographic location, education, and certifications.

Federal Compliance

As a federal contractor, TestPros is subject to all federal and state mandates and/or other customer requirements.