Security Assurance Professional

The position of Senior Manager, Security Assurance is a critical role that requires leading security assurance initiatives and driving compliance with various security frameworks to ensure the integrity of our data.

The ideal candidate will possess extensive experience in cybersecurity frameworks and audits, including HITRUST, SOC, ISO 27001, NIST, and PCI DSS. They will also be responsible for facilitating external audits and collaborating with cross-functional teams to enhance our security posture.

• Lead and manage the Security Assurance programs, ensuring compliance with regulatory and internal standards such as HIPAA and GDPR.
• Oversee, coordinate, and facilitate external audits (i.e., HITRUST, SOC, ISO 27001, NIST, PCI DSS) and collaborate with auditors to provide necessary documentation and responses.
• Assess and identify gaps in security controls and develop strategies for remediation and improvement.
• Serve as a subject matter expert on security frameworks and help influence the organization's security strategy.
• Develop and implement security standards and policies in alignment with organizational objectives and industry best practices.
• Conduct risk assessments and vulnerability assessments to evaluate the security posture of the organization and its assets.
• Collaborate with IT, Legal, and Compliance teams to ensure coherent security practices across the organization.
• Review change management requests to ensure alignment with compliance frameworks and security standards, providing recommendations for mitigating potential risks associated with proposed changes.
• Collaborate with cross-functional teams to assess security compliance requirements in contracts, offering guidance and support in drafting, negotiating, and reviewing contractual terms related to data protection and security compliance measures.
• Assist in the identification and documentation of security-related clauses in contracts, ensuring that all agreements reflect the necessary compliance and risk management measures in accordance with relevant frameworks.
• Prepare and present regular updates to senior leadership on the status of security assurance initiatives and audit findings.

• A minimum of 7-10 years of experience in information security, with a focus on security assurance and compliance.
• Bachelor's degree in Computer Science, Information Technology, Security Management, or a related field (Master's degree preferred).
• In-depth knowledge of security frameworks and standards such as HITRUST CSF, SOC 1/2, ISO 27001, NIST, PCI DSS, etc.
• Proven experience in managing and leading external audit engagements, including preparation, facilitation, and follow-up.
• Strong analytical and problem-solving skills, with the ability to assess complex security issues and implement effective solutions.
• Exceptional communication and interpersonal skills with the ability to engage and influence stakeholders at all levels.
• Experience in project management and the ability to prioritize and manage multiple initiatives simultaneously.
• Proven experience with compliance software and external audit portals for evidence posting and collaboration.
• Knowledge of audit cycles and certifications for cloud-hosted applications.
• Relevant security certifications and framework certifications are highly desirable.

We are a global leader in the customer experience industry, with 150,000 associates worldwide. We deliver innovative CX solutions, technology, and expertise to support operational needs for our clients and deliver seamless experiences to customers in the moments that matter.