SeniorInfoSecGRCSpecialist

and maintain comprehensive information security policies

and procedures aligned with the ISO 27001 framework

and mature the organization's Information Security Management System including risk treatment

and readiness for external certification audits

Serve as the subject matter expert (SME) for Security and Privacy Rules

ensuring compliance for all systems

and applications handling PII and Protected Health Information (PHI)

Conduct continuous monitoring and evidence collection to demonstrate compliance with relevant frameworks

conduct and manage internal and supplier audits

prioritise and implement them in timebound manner

Perform detailed security risk assessments and gap analyses on new and existing systems

with a focus on cloud infrastructure

Collaborate with Product

IT and Security teams to implement security controls into cloud / infra / environments

Review risk mitigations periodically and track remediation efforts to closure

Conduct third-party vendor risk assessments

focusing on their adherence to required compliance standards

Develop and deliver targeted security awareness and training programs focused on HIPAA and ISO 27001 requirements for all staff

including technical teams

Evaluate and recommend new security technologies and processes to enhance the compliance and risk posture

Stay current on emerging cloud security threats

and updates to the ISO 27001 family of standards and HIPAA