Security Compliance Program Manager

Security Compliance Program Manager role at HealthVerity with responsibilities including developing FedRAMP-specific policies and supporting FedRAMP compliance. The role requires a strong focus on compliance and security, with experience in FedRAMP, HIPAA, and NIST 800-53.

Requirements

• Develop, document, and maintain FedRAMP-specific policies, procedures, and controls
• Support efforts to maintain FedRAMP compliance, including the creation of System Security Plan (SSP), gathering evidence, and preparing reports
• Collaborate with team members to manage the continuous monitoring (ConMon) program, including internal and external reporting on vulnerabilities, tracking POA&Ms, and developing ConMon artifacts
• Coordinate with internal teams to develop and implement policies to meet compliance requirements
• Collaborate with third-party assessors to complete security assessments and audits
• Conduct third party risk assessments
• Drive security training and phishing campaigns
• Conduct periodic risk assessments and audits to ensure compliance with applicable regulatory frameworks

Benefits

• 401(k) plan
• Stock options
• Health, dental, and vision coverage
• Flexible location
• Generous PTO
• Parental Leave
• Comprehensive and individualized onboarding
• Professional development