- Overland Park, Kansas, United States
- On-site
- Full-time · Manager
- 4–6 years
Lead and manage WellSky’s compliance programs, including IT controls, SOC examinations, and regulatory requirements across healthcare and SaaS environments.
Responsibilities
- Partner with business and technical owners for system descriptions, scoping, trust service criteria and development, implementation, and communication of compliance controls
- Draft, revise, and maintain inventory of technology compliance policies and procedures consistent with changing compliance requirements
- Develop and maintain systems to support continuous monitoring and reporting using GRC platform and automated evidence collection
- Serve as primary contact for managing technology compliance initiatives with external auditors e.g. SOC reports, HiTrust, PCI DSS
- Lead assurance engagements including the annual SOC 1 Type II and SOC 2 Type II examinations from scoping through report issuance
Requirements
- Bachelor’s degree or equivalent work experience
- Nice to have: NIST 800-53
- Nice to have: HIPAA Security rule
- Nice to have: HiTrust CSF
- Nice to have: healthcare technology