Lead GRC Analyst Job at TherapyNotes, LLC, Remote

cjNhUjRpOXBJUlcvQVEyRHVORlhZaUtpSFE9PQ==
  • TherapyNotes, LLC
  • Remote

Job Description

About Us

TherapyNotes is the go-to superhero for behavioral health Practice Management and EHR software! Our top-notch SaaS solution handles scheduling, billing, documenting, telehealth, and more so clinicians can focus on awesome patient care.

We're a dynamic team of pros who love to innovate and push the envelope, keeping our software cutting-edge. Join us, and let's revolutionize behavioral health software together while making a real difference!

Position Description

TherapyNotes is seeking an experienced cyber security professional to join our team of technology enthusiasts.  The right candidate should have a focus on cybersecurity compliance, security control implementation, risk/vulnerability management, continuous monitoring, and security awareness training. The role will serve as the liaison for external audits, oversee an internal cybersecurity audit program, and lead a team of GRC Analysts. This role requires a strong understanding of regulatory requirements, risk management frameworks, and industry best practices.

Qualifications

  • BS degree from an accredited postsecondary institution or program in Information Security, Risk Management, Business Administration, or related field
  • 5+ years of experience in GRC, risk management, or related fields, with demonstrated leadership experience
  • Certified Information Systems Security Professional (CISSP), Certified Information Security Auditor (CISA), Certified Information Security Manager (CISM) or Certified in Risk and Information Systems Control (CRISC) strongly preferred
  • Strong knowledge of regulatory requirements (e.g., GDPR, HIPAA, PCI-DSS, CPRA) and industry standards (e.g., ISO 27001, NIST).
  • Expert in designing, implementing, and maintaining security solutions
  • Experience developing and implementing GRC frameworks, policies, and procedures
  • Expert in OWASP, CIS and/or other security standards and secure configuration baselines
  • Proficiency with cloud-based solutions and web related technologies

*Please feel free to submit your application if you feel you would be a good fit for this role, but you don't meet all the required and preferred skills. We will take a look at your resume!

Responsibilities

  • Develop and implement GRC strategies, policies, and procedures to ensure compliance with regulatory standards and industry best practices.
  • Lead the assessment and management of risks across the organization, including conducting risk assessments, identifying gaps, and developing mitigation plans.
  • Collaborate with cross-functional teams to integrate GRC principles into business processes and systems.
  • Monitor regulatory changes and industry trends to ensure the organization remains compliant and proactive in addressing emerging risks.
  • Provide guidance and training to employees on GRC policies, procedures, and best practices.
  • Oversee the execution of audits, assessments, and compliance activities to validate adherence to compliance standards.
  • Act as a liaison with external auditors, regulators, and stakeholders on GRC-related matters.
  • Develop and maintain key performance indicators (KPIs) and metrics to measure the effectiveness of GRC initiatives.
  • Mentor and coach GRC analysts, fostering their professional development and growth within the organization.
  • Drive the execution and continual improvement of the company’s information security program, including meeting HIPAA-HITECH, state, and GDPR compliance requirements
  • Identify and document cyber risks and manage mitigation, follow up on open security risks, and report issues to leadership
  • Assist with ad-hoc compliance reporting and follow up with customers and/or support partners to ensure all identified vulnerabilities are being addressed
  • Provide support to Information Security Incident Response team during cyber/privacy incidents
  • Validate that information security requirements are built into architectures and new technology projects
  • Ensures the running application and developing codebase protects the confidentiality, integrity, and availability of our customer's data
  • Evaluate the technical security posture of newly proposed third-party solutions

Benefits

  • Competitive salary - $100,000-$140,000
  • Employer sponsored health, dental, vision, life, and disability insurance
  • Retirement plan with company contribution
  • Annual company profit sharing
  • Personal development/training budget
  • Open, collaborative work environment
  • Extensive 2-week onboarding plan
  • Comprehensive mentorship program

TherapyNotes, LLC is an Equal Employment Opportunity Employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status. All candidates whom have been given a conditional offer of employment with TherapyNotes, LLC must also undergo a criminal background check.

#LI-Remote
#LI-PL1

11/7/2024

Job Tags

Remote job,

Similar Jobs

Forma

BSA Compliance Officer Job at Forma

 ...innovation, and as a Great Place to Work. About the Role The Compliance Officer will design and execute Formas compliance function to...  ...to ensure compliance with the BSA, Anti-Money Laundering (AML) laws, and other regulatory requirements. Establishing a... 

Andasol Management, Inc.

Marketing Manager Job at Andasol Management, Inc.

 ...Marketing Manager KoBre Companies seeks talented individuals who have an entrepreneurial spirit and desire a fast-paced work environment. Ideal job candidates are self-starters, reliable teammates, and need little oversight. KoBre is currently seeking an Marketing... 

FWC

Full Time Window Cleaner Job at FWC

 ...Description Job Description Get hired this week with paid training. ($23,500 - $39,000 yearly) Here at Fish Window Cleaning, we...  ...service to both our commercial and residential customers. Our cleaners work Monday Friday. If this sounds like a good fit for you, apply... 

Wipro

.NET Senior Developer (m/w/d) Job at Wipro

Here we grow again! Great Opportunity!Wipro is seeking individuals who combine excellent customer service and problem-solving skills with the ability to function effectively both as part of a team or on an individual basis to bring their talent to our team.Wipro is... 

Cintas

SAP Developer - Level 3 - MDG Job at Cintas

 ...Requisition Number: 183211 Job Description Cintas is currently looking for an SAP Developer-Level 3 for the SAP MDG team in IT. The SAP Developer - Level 3 is responsible for: working on major projects that may span a broad range of systems, providing subject matter...