Security & Compliance Analyst (Hybrid)

Commonwealth of VA Careers; Richmond (VA); Hybride; USD 65 000 - 100 000; Plein temps

Résumé du poste

Commonwealth of VA Careers seeks a Security & Compliance Analyst to join the Health Benefit Exchange’s Information Security team in a hybrid role that balances in-office and telework days. The position focuses on protecting resident data and ensuring adherence to state and federal privacy and security regulations.

The analyst will coordinate with federal agencies, SCC teams, vendors, and third parties to perform assessments, audits, and compliance activities, while reporting findings to HBE

Responsabilités

• Coordinate with federal agencies, SCC internal teams, vendors, and 3rd parties to perform privacy and security assessments, audits, and other security and privacy compliances activities
• Conduct complex audits of HBE partners and vendors to evaluate compliance with privacy and security requirements
• Lead and participate in internal assessments to evaluate compliance with information security and privacy policies, procedures, regulations, and agreements
• Monitor regulatory changes, evaluate impacts, and prepare reports and recommendations for compliance on security and privacy policies for HBE senior leadership
• Review and update security and privacy control documentation to ensure it is accurate, up to date, and adheres to legal and regulatory requirements
• Develop and present compliance findings from audits and assessments to HBE senior leadership and prepare remediation reports
• Develop, update, and support implementation of data security and privacy protection policies and procedures
• Coordinate with vendors and monitor complex security and privacy incidents
• Contribute to continuous improvement efforts
• Perform related work as required

Description du poste

Additional Detail

Security & Compliance Analyst (Hybrid)

Starting Salary Range: $65,000 - $100,000

The State Corporation Commissions (SCC) Health Benefit Exchange (HBE) division seeks an experienced Security & Compliance Analyst interested in a rewarding public service career to join its Information Security team. The Security & Compliance Analyst will work under the direction of the HBE Information Security Manager to safeguard the HBEs consumer data and ensure compliance with state and federal regulations. This position offers a hybrid work schedule (some in-office and telework days each week) as well as a variety of professional development and training opportunities.

Essential Functions & Responsibilities

• Coordinate with federal agencies, SCC internal teams, vendors, and 3rd parties to perform privacy and security assessments, audits, and other security and privacy compliances activities
• Conduct complex audits of HBE partners and vendors to evaluate compliance with privacy and security requirements
• Lead and participate in internal assessments to evaluate compliance with information security and privacy policies, procedures, regulations, and agreements
• Monitor regulatory changes, evaluate impacts, and prepare reports and recommendations for compliance on security and privacy policies for HBE senior leadership
• Review and update security and privacy control documentation to ensure it is accurate, up to date, and adheres to legal and regulatory requirements
• Develop and present compliance findings from audits and assessments to HBE senior leadership and prepare remediation reports
• Develop, update, and support implementation of data security and privacy protection policies and procedures
• Coordinate with vendors and monitor complex security and privacy incidents
• Contribute to continuous improvement efforts
• Perform related work as required