HITRUST Consultant

Summary

Join RSI Security as a Certified HITRUST CSF Practitioner (CCSFP) Consultant and play a key role in guiding organizations through HITRUST CSF compliance. This 100% remote, part-time, project-based contractor position involves conducting readiness assessments, gap analyses, and developing remediation plans. You will assist in implementing security controls, developing policies and procedures, and creating awareness programs. The consultant supports internal audits, prepares clients for HITRUST certification, and acts as a liaison for accurate documentation. Compensation is based on experience, education, location, and market rates. RSI Security is an equal opportunity employer committed to diversity and inclusion.

Requirements

• A strong foundation in information security, IT, or a related field
• Relevant work experience in information security, compliance, risk management, or IT auditing
• Completion of the official HITRUST CCSFP training course
• Familiarity with common security frameworks and standards such as ISO/IEC 27001, NIST 800-53, HIPAA, and PCI DSS
• Proficiency in assessing and implementing security controls, conducting risk assessments, and analyzing gaps in security and compliance
• Successful completion of the HITRUST CCSFP certification exam

Responsibilities

• Conduct comprehensive readiness assessments to evaluate an organization's current compliance posture against HITRUST CSF (Common Security Framework) requirements
• Identify gaps in existing security and privacy controls, develop a detailed remediation plan, and provide guidance on how to address these deficiencies to meet HITRUST standards
• Assist clients in designing, implementing, and optimizing security controls that align with HITRUST CSF to strengthen their overall information security posture
• Create or refine security policies and procedures to ensure they meet HITRUST CSF requirements and align with the organization’s compliance objectives
• Provide training and education to client teams about HITRUST requirements, best practices, and processes to maintain compliance and build a culture of security awareness
• Conduct internal audits to prepare clients for official HITRUST validations, providing detailed feedback and recommendations for improvement
• Act as a liaison and advisor during the official HITRUST certification process, ensuring that all required documentation and evidence are accurately compiled and submitted

Preferred Qualifications

• A bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a similar field
• Ongoing Professional Development