About the job
At OneStudyTeam, a subsidiary of Reify Health, we are dedicated to accelerating clinical trials and enhancing the likelihood of new therapies receiving approval, with the ultimate aim of improving patient outcomes. Our innovative cloud-based platform, StudyTeam, digitizes research site workflows, enabling sites, sponsors, and other key stakeholders to collaborate more efficiently. Trusted by leading global biopharmaceutical companies, StudyTeam is utilized in over 6,000 research sites across more than 100 countries. Join us in our mission to enhance clinical research and patient care.
One mission. One team. That’s OneStudyTeam.
We are looking for a Senior Security Compliance Analyst with a solid background in Governance, Risk, and Compliance (GRC) to bolster our security and compliance initiatives within the healthcare sector. This pivotal role is essential for ensuring compliance with industry regulations, addressing customer audits, and upholding adherence to ISO 27001, HIPAA, and other critical security frameworks.
The successful candidate will possess a meticulous attention to detail, capable of navigating complex regulatory landscapes, supporting both internal and external audits, and driving continuous enhancements in security governance. The ideal candidate will operate autonomously while fulfilling the following responsibilities.
Key Responsibilities:
- Lead and facilitate customer security audits, addressing security questionnaires and demonstrating compliance with security frameworks.
- Prepare, coordinate, and oversee ISO 27001 audits, including evidence gathering, control implementation, and auditor engagement.
- Ensure ongoing compliance with HIPAA, NIST CSF, and other regulatory standards relevant to healthcare data security.
- Develop and uphold policies, procedures, and security documentation to meet regulatory and contractual requirements.
- Conduct gap analyses and risk assessments to pinpoint and mitigate compliance risks.
- Manage and enhance security governance frameworks, ensuring alignment with industry best practices and organizational objectives.
- Execute third-party vendor risk assessments, confirming adherence to security policies and contractual obligations.
- Monitor security controls to ensure effectiveness and promote ongoing improvement in line with security frameworks.
- Support security awareness training initiatives to ensure staff are well-versed in compliance responsibilities.
- Stay abreast of ISO 27001, HIPAA, NIST 800-53, and other pertinent standards, translating complex requirements into actionable policies.
