Information Security GRC & Audit Readiness Manager

Random Bit LLC; Atlanta (GA); In loco; USD 120.000 - 180.000; Tempo pieno

Descrizione del lavoro

Random Bit LLC is seeking an Information Systems Security Manager to support a state Medicaid agency’s Enterprise Security & Compliance team. You will guide governance, risk, and compliance efforts across regulatory assessments, control validation, and remediation activities.

You will collaborate with security analysts, technology teams, and leadership to translate requirements into actionable evidence and robust documentation, ensuring assessment readiness and continuous improvement across

Competenze

• Professional experience in cybersecurity, information security, governance, risk, compliance, IT audit, security architecture, or a closely related discipline.
• Experience translating requirements into actionable control, documentation, or evidence.
• Experience reviewing, developing, or maintaining information security policies, standards, procedures, and governance documentation.
• Experience performing security control assessments, compliance assessments, gap analyses, or audit-readiness activities.
• Working knowledge of cybersecurity control frameworks and security risk management concepts.
• Ability to communicate security and compliance requirements effectively to technical and non-technical stakeholders.
• Strong written communication and organizational skills with multiple controls and evidence requests.
• Ability to work independently on compliance assignments while collaborating with security analysts, technical teams, leadership, auditors, and assessors.

Mansioni

• Compliance Assessments and Audit Readiness: Support assessments and audit-readiness for CMS ARC-AMPE, HITRUST r2, SSA regulatory audits, and other requirements, including evidence preparation and responses to findings.
• Control Analysis and Gap Identification: Interpret requirements, evaluate documentation and implementation, identify gaps in policies, procedures, standards, and evidence.
• Policy and Standards Development: Review, update, and develop security policies, standards, guidelines, and related documentation.
• Procedure Development: Collaborate with analysts and operations to document and improve security procedures reflecting practices and control implementation.
• Objective Evidence Management: Identify required evidence, evaluate relevance, completeness, and currency, and coordinate with control owners to obtain artifacts.
• Control Mapping and Traceability: Maintain mappings between requirements, controls, policies, procedures, stakeholders, and evidence.
• Remediation Support: Document deficiencies, recommend actions, and coordinate remediation activities to resolution.
• Stakeholder Collaboration and Process Improvement: Work with security, infrastructure, cloud, apps, data, and business teams to validate controls and improve documentation.

Conoscenze

GRC governance

Audit readiness

Policy & standards development

Control mapping & traceability

Stakeholder collaboration

Written communication

Analytical / organizational skills

Independent work on compliance

Descrizione del lavoro

Random Bit LLC is seeking an Information Systems Security Manager to support a state Medicaid agency’s Enterprise Security & Compliance team. You will guide governance, risk, and compliance efforts across regulatory assessments, control validation, and remediation activities.

You will collaborate with security analysts, technology teams, and leadership to translate requirements into actionable evidence and robust documentation, ensuring assessment readiness and continuous improvement across