InfoSec Assurance Lead - HITRUST & SOC 2 Audits

MRO; Norristown (Montgomery County); Presencial; USD 120.000 - 180.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical, dental, vision

Life insurance

401(k) plan

Descripción de la vacante

The Information Security Assurance Advisor at MRO leads the development, implementation, and maintenance of information security policies, controls, and evidence across the organization. The role drives HITRUST and SOC 2 Type II readiness and examinations using the Vanta GRC platform, shaping a security-first culture.

Candidates bring 6+ years in information security assurance, GRC, or audits, with hands-on HITRUST and SOC 2 experience, and proficiency in Vanta.

Formación

• 6+ years in information security assurance, GRC, or audits.
• Experience coordinating HITRUST and SOC 2 Type II audits.
• Hands-on with Vanta for controls, evidence, auditor requests, findings, remediation.
• Bachelor's degree in Engineering or Technology or related field.

Responsabilidades

• Develop, implement, and maintain security policies, procedures, controls, and evidence.
• Lead HITRUST readiness and SOC 2 Type II examinations from planning to report issuance.
• Manage audit activities via Vanta GRC platform and drive remediation.
• Perform third-party risk assessments and support risk management lifecycle.
• Drive phishing simulations and security training across the organization.

Conocimientos

Flexibility

Client management

Communication

Problem solving

Attention to detail

Educación

BE/B.Tech or related field

Herramientas

Vanta platform

Audit management

Descripción del empleo

The Information Security Assurance Advisor at MRO leads the development, implementation, and maintenance of information security policies, controls, and evidence across the organization. The role drives HITRUST and SOC 2 Type II readiness and examinations using the Vanta GRC platform, shaping a security-first culture.

Candidates bring 6+ years in information security assurance, GRC, or audits, with hands-on HITRUST and SOC 2 experience, and proficiency in Vanta.