Senior GRC Security Engineer - Risk, IAM & Compliance

NEXTGEN Healthcare; Atlanta (GA); On-site; USD 120,000 - 150,000; Full time

Job summary

NextGen Healthcare is seeking a Senior Security Engineer to develop solutions leveraging security tools and technology. The role requires a strong security engineering background across cybersecurity and information security, collaboration with IT partners, and hands-on administration of GRC platforms.

The candidate will work with teams to gather data from logs, support compliance with HITRUST/SOC 2, and help improve security controls across IAM, MFA, RBAC, SSO, DLP, and SIEM.

Qualifications

• Bachelor's degree in Computer Science or related discipline, or advanced degree.
• 4-6 years of relevant security engineering experience.
• Experience with phishing campaigns, vulnerability scans, IAM, MFA, RBAC, SSO, DLP, SIEM.
• Familiarity with COSO, NIST CSF, RMF, ISO, COBIT frameworks.
• Experience in HIPAA/SOX/SOC/Pci environments.

Responsibilities

• Develop solutions using tools and technology to support Information Security and GRC work, project, and initiatives.
• Act as system administrator for security or GRC tools and platforms (phishing, training, DLP, TPRM, Risk Register, privacy management).
• Integrate related tools with other systems as needed.
• Engage with security vendors on design sessions and configure GRC solutions for use.
• Work with IT partners to gather data from logs to assess risks and support compliance.

Skills

GRC knowledge

Threat intelligence

Security analytics

Incident handling

Education

Bachelor's degree in CS or related field

Tools

SIEM

DLP

IAM

MFA

RBAC

SSO

Job description

NextGen Healthcare is seeking a Senior Security Engineer to develop solutions leveraging security tools and technology. The role requires a strong security engineering background across cybersecurity and information security, collaboration with IT partners, and hands-on administration of GRC platforms.

The candidate will work with teams to gather data from logs, support compliance with HITRUST/SOC 2, and help improve security controls across IAM, MFA, RBAC, SSO, DLP, and SIEM.