Medicaid GRC & Compliance Strategist

Random Bit; United States; Remote; USD 90,000 - 150,000; Full time

Job summary

Random Bit in the United States seeks a Governance and Compliance Consultant to support a state Medicaid agency’s Enterprise Security & Compliance team. This role provides cybersecurity governance, risk, and compliance (GRC) across regulatory assessments, control validation, and audit readiness, coordinating with analysts, business units, leadership, and assessors.

The ideal candidate translates requirements into actionable documentation, maintains control mappings, and supports remediation

Qualifications

• Experience interpreting security or compliance requirements and translating them into actionable control, documentation, or evidence requirements.
• Ability to review and maintain information security policies, standards, procedures, and governance documents.
• Experience performing security control assessments, compliance assessments, gap analyses, or audit-readiness activities.

Responsibilities

• Support compliance assessments and audit-readiness activities for CMS ARC-AMPE, HITRUST r2, SSA regulatory compliance audits and related requirements.
• Interpret security and compliance requirements, evaluate control documentation, and identify gaps in policies and evidence.
• Develop and update security policies, standards, guidelines, and related documentation to meet requirements.
• Collaborate with teams to document and improve security procedures reflecting operational practices and controls.
• Identify objective evidence, evaluate its relevance and accuracy, and coordinate with control owners to obtain artifacts.
• Maintain mappings between regulatory requirements, controls, policies, procedures, and evidence to demonstrate compliance.
• Document deficiencies, propose corrective actions, and track remediation through to resolution.
• Collaborate with stakeholders to validate control implementation and improve evidence collection and assessment processes.

Skills

Cybersecurity

GRC

Audit readiness

Policy writing

Stakeholder communication

Job description

Random Bit in the United States seeks a Governance and Compliance Consultant to support a state Medicaid agency’s Enterprise Security & Compliance team. This role provides cybersecurity governance, risk, and compliance (GRC) across regulatory assessments, control validation, and audit readiness, coordinating with analysts, business units, leadership, and assessors.

The ideal candidate translates requirements into actionable documentation, maintains control mappings, and supports remediation