ISSM: Healthcare GRC & Audit Readiness Leader

Random Bit; Atlanta (GA); On-site; USD 110,000 - 150,000; Full time

Job summary

Random Bit is seeking an Information Systems Security Manager to support a state Medicaid agency’s Enterprise Security & Compliance team. This role provides cybersecurity governance, risk, and compliance (GRC) support across regulatory assessments, security control validation, audit readiness, documentation management, and remediation activities.

The position collaborates with agency security analysts, technology teams, business stakeholders, leadership, and assessment teams to evaluate

Qualifications

• Professional experience in cybersecurity, information security, governance, risk, compliance, IT audit, security architecture, or a closely related discipline.
• Experience interpreting security or compliance requirements and translating them into actionable control, documentation, procedural, or evidence requirements.
• Experience reviewing, developing, or maintaining information security policies, standards, procedures, and governance documentation.
• Experience performing security control assessments, compliance assessments, gap analyses, or audit-readiness activities.
• Working knowledge of cybersecurity control frameworks and security risk management concepts.
• Ability to communicate security and compliance requirements to both technical and non-technical stakeholders.
• Strong written communication skills to create clear, defensible, and assessment-ready documentation.
• Strong analytical and organizational skills to manage multiple controls, findings, evidence requests, and remediation activities.
• Ability to work independently on compliance assignments while collaborating with security analysts, technical teams, leadership, auditors, and assessors.

Responsibilities

• Compliance Assessments and Audit Readiness: support CMS ARC-AMPE, HITRUST r2, SSA audits and related requirements; manage evidence and responses.
• Control Analysis and Gap Identification: evaluate control documentation and identify policy/procedure gaps.
• Policy and Standards Development: review and update security policies, standards, guidelines, and related docs.
• Procedure Development: collaborate with teams to document and improve security procedures reflecting operations.
• Objective Evidence Management: identify required evidence and coordinate with owners to collect artifacts.
• Control Mapping and Traceability: maintain mappings between requirements, controls, policies, and evidence.
• Remediation Support: document deficiencies, propose corrective actions, track remediation to closure.
• Stakeholder Collaboration: work with security, infrastructure, cloud, apps, data, and business teams to improve evidence collection and processes.

Job description

Random Bit is seeking an Information Systems Security Manager to support a state Medicaid agency’s Enterprise Security & Compliance team. This role provides cybersecurity governance, risk, and compliance (GRC) support across regulatory assessments, security control validation, audit readiness, documentation management, and remediation activities.

The position collaborates with agency security analysts, technology teams, business stakeholders, leadership, and assessment teams to evaluate