Cybersecurity and Compliance Professional
- Full-time
Company Description
Digital Forge has been a forward-thinking market leader in Cybersecurity, Compliance, Risk Management, and Incident Response since 1996. Clients choose Digital Forge because of our world-class team of business and cybersecurity professionals, who continually advance themselves in their respective disciplines through continued education and in-the-field experience. The core of our success is a direct result of our people, processes, and technology. Our team of professionals bring countless years of experience, discipline, and skills that directly impact the success of our company and our clients.
We partner with our clients, working in union towards a common purpose and assuming complete accountability throughout our engagements. We deliver on our assurances, remaining engaged throughout the lifecycle to ensure continuity of experience. Our methodologies have been built through years of experience developing and architect business and information systems. Our approach incorporates a clear understanding of the client’s desired objectives and analysis from various perspectives to ensure we deliver on expectations. We have proven best practices designed to improve performance, simplify regulatory compliance, and deliver measurable results to our clients.
At Digital Forge we drive proper adoption and utilization of technology that are foundations for success with our clients. We continuously innovate to shape the most fluid practices and methodologies in our core competencies and influence positive change in those competencies across all industries.
Job Description
- Perform vulnerability testing and reporting
- Perform various cybersecurity functions
- You will support the organization’s cybersecurity, compliance, and consulting practice in delivering various IS027K, HITRUST, HIPAA, and NIST Compliant governance and security services.
- Assist in performing Risk Assessments to ensure compliance with IS027K, HITRUST, PCI DSS, HIPAA, and NIST.
- You will assist in writing and updating IS027K, HITRUST, PCI DSS, HIPAA, and NIST Compliant Policies and Procedures.
- Interpretation of industry or regulatory requirements and apply them to business operations
- Required to create or choose an approach or procedure from a variety of complex options for addressing a work task.
- Interfaces with clients, analysts, and project managers to clarify requirements and documentation.
- Review’s literature and documentation and compares such to current practices relevant to the solution of assigned projects.
- Works with various Quality Assurance standards to review detailed documents, policies, procedures, and related materials.
- Assists other team members with their assignments as required.
- Orchestrate the planning of various reports, preparation of audit and compliance programs, performing testing procedures, drafting respective reports for presentation, and assessing management action plans.
- Develop status and analysis reports and presentations for regular review.
- Create other highly detailed documentation for internal and external use.
Qualifications
Required
- Experience in Compliance or Cybersecurity
- Office skills sets including working with Microsoft Word, Excel, PowerPoint, and Outlook.
- Excellent organizational and communication skills.
- Excellent decision making and critical-thinking skills.
- Displays knowledge of, and ability to apply, logic to complex scenarios
- Analyzes and determines task needs.
- Displays in-depth knowledge of, and ability to apply, basic project management skills.
- Consistent exercise of independent judgment and discretion in matters of significance.
- Maintains productive and professional relationship with all customers and staff members.
- Possess exceptional written/verbal communications skills, presentation skills, and organizational time management skills
- Must be self-motivated and have a positive attitude.
- Must be detail oriented and the ability to multi-task.
- Ability to meet deadlines with Projects and Assignments.
- Ability to learn and support new processes and train others as applicable.
- Ability to articulate the requirements for technical, contractual, commercial and management responses.
- Experience excelling in a dynamic culture that requires adaptability to changes in procedures, processes, technologies, responsibilities, assignments, schedules and unknown evolutions of team requirements.
Preferred
- Previous Cybersecurity experience
- Penetration Testing skillsets
- Vulnerability Testing skillsets
- CISSP or equivalent certification
- PCI QSA Certification
- Knowledge of HIPAA, HITRUST, ISO 27001, NIST, PCI DSS, or SSAE SOC standards.
- Experience with creating and maintaining IT Policies and Procedures that are HIPAA, HITRUST, ISO 27001, NIST, PCI DSS, or SSAE SOC standards.
- Experience with Healthcare technology environments or and related compliance.
- Paralegal skillsets would prove valuable in this position
Additional Information
Benefits and Compensation
- Salary based on Skill sets, Capability, and Experience
- Flexible hours and Remote Work Friendly
- Comprehensive Health Insurance
- Prescription Coverage
- Dental Coverage
- Vision Coverage
- Short-Term Disability
- 401K Retirement Plan
- Paid Time Off
- Paid Training
- Paid Certification Testing