Security Compliance Specialist

Description Kforce has a client that is seeking a Security Compliance Specialist in Los Angeles, CA.

Summary:

We're seeking a Security Compliance Specialist to support a leading healthcare organization's cybersecurity Governance, Risk & Compliance (GRC)/Information Assurance program. This is an excellent opportunity for a cybersecurity compliance professional who has experience with security risk assessments, control assessments, audits, policy governance, and regulatory compliance and wants to help mature an enterprise cybersecurity program.

What You'll Do:
* Support cybersecurity governance, risk management, compliance, and control assurance activities
* Conduct and coordinate security risk assessments and control reviews across systems, applications, processes, and initiatives
* Partner with control owners to collect evidence, validate security controls, identify gaps, and track remediation
* Support internal and external audits, including evidence collection, findings, management responses, and corrective actions
* Develop and maintain Information Security policies, standards, procedures, and governance documentation
* Map security requirements and controls to frameworks including HIPAA, NIST CSF, and HHS 405(d) HICP
* Maintain cybersecurity risks, findings, exceptions, and remediation plans and escalate significant or overdue items when needed
* Develop KRIs, KPIs, and compliance metrics that demonstrate control effectiveness and program maturity
* Support cybersecurity awareness, education, and training initiatives
* Partner across Cybersecurity, IT, Privacy, Compliance, Legal, Internal Audit, and business teams
* Help transition compliance activities from point-in-time audit exercises toward continuous, measurable, risk-based control assurance Requirements
* Bachelor's degree in Cybersecurity, Information Systems, IT, Risk Management, Business, Healthcare Administration, or a related field, or equivalent relevant experience
* 3+ years of experience in cybersecurity, information security compliance, GRC, risk management, audit, information assurance, or a related discipline
* Experience supporting cybersecurity compliance or risk management in a regulated environment
* Hands-on experience with cybersecurity risk assessments, control assessments, audits, evidence collection, and remediation tracking
* Experience interpreting cybersecurity policies, controls, regulations, and security frameworks
* Experience developing or maintaining security policies, standards, or procedures
* Strong analytical, written, verbal, organizational, and stakeholder-management skills

Highly Preferred:
* Healthcare cybersecurity experience
* Experience with NIST CSF
* Experience developing cybersecurity compliance KRIs/KPIs
* Security awareness or training experience
* Strong knowledge of HIPAA
* Familiarity with HHS 405(d)/HICPJob Type Direct Hire Compensation
130000 - $150000