• Provide guidance to ensure project compliance to the United States Government Baseline (USGCB) for IT Security • Provide technical expertise of computer security laws, mandates, standards, and policies • Utilize technical expertise to complete computer security related functions • Represent the project in internal and external meetings • Participate in internal security and compliance program and track recurring controls • Document new and update existing policies, procedures, standards, and resources • Help support customer security reviews, RFPs, and external security and privacy inquiries • Help support internal/external audits and evidence collection • Participate in defining, collecting and tracking various Security Metrics

• Lead and support customer security audits, responding to security questionnaires and demonstrating compliance with security frameworks. • Prepare, coordinate, and manage ISO 27001 audits, including evidence collection, control implementation, and auditor engagement. • Ensure ongoing compliance with HIPAA, NIST CSF, and other regulatory requirements applicable to healthcare data security. • Develop and maintain policies, procedures, and security documentation to meet regulatory and contractual obligations. • Perform gap analyses and risk assessments to identify and remediate compliance risks. • Manage and improve security governance frameworks, ensuring alignment with industry best practices and business objectives. • Conduct third-party vendor risk assessments, ensuring compliance with security policies and contractual obligations. • Monitor security controls, ensuring effectiveness and continuous improvement in alignment with security frameworks. • Support security awareness training initiatives, ensuring employees understand compliance responsibilities. • Stay current on ISO 27001, HIPAA, NIST 800-53, and other relevant standards, translating them into actionable security controls. • Assist in defining security metrics and reporting on compliance status and risk posture to leadership. • Work closely with legal, security, IT, and business teams to align compliance requirements with security operations.