Remote Security Customer Assurance Specialist

Summary

Join Datavant, a data logistics company for healthcare, as a lead in the Information Security Governance, Risk, and Compliance (GRC) organization. You will be responsible for building trust with customers through security assurance and contributing to the growth of the business by leveraging our strong security program.

Requirements

• 4+ years experience in security, audits, customer assurance, control assessments, or risk assessments based on security and privacy frameworks
• Experience in performing technical assessments and documentation around key controls and security processes
• Excellent analytical, problem-solving, and project management skills
• Strong communication and interpersonal skills, with the ability to work effectively with cross-functional teams, stakeholders, and customers
• Detail-oriented and able to handle multiple priorities in a fast-paced environment
• Ability to operate effectively in ambiguity

Responsibilities

• Coordinate and manage responses to customer enquiries
• Perform technical assessments and documentation around key controls and security processes
• Liaise with customers, articulating control implementation and describing considerations for applying security and compliance concepts to a technical environment
• Field and address requests for team support in collaboration with internal and external stakeholders
• Communicate effectively and regularly with internal teams and customers
• Support our legal teams in contract review activities to ensure security contract clauses are appropriate
• Track metrics and develop reporting to demonstrate the status and progress of your work
• Continuously build and refine knowledge base information, whitepapers, frequently asked questions, control narratives, etc. and contribute to ongoing development and improvement
• Understand the impact of security in our go-to-market pipeline, report on trends and help us improve how we invest in security
• Stay apprised on industry standards and regulations for security and compliance

Preferred Qualifications

• One or more industry-recognized security, cloud, or audit professional certifications (e.g., CISA, CISM, CISSP, CCSP, etc.)
• IT security and audit experience in the healthcare industry
• Knowledge of, or experience working with, cloud-services environment (e.g. AWS) and cloud security controls