About Us

TherapyNotes is the go-to superhero for behavioral health Practice Management and EHR software! Our top-notch SaaS solution handles scheduling, billing, documenting, telehealth, and more so clinicians can focus on awesome patient care.

We're a dynamic team of pros who love to innovate and push the envelope, keeping our software cutting-edge. Join us, and let's revolutionize behavioral health software together while making a real difference!

Description

TherapyNotes is seeking an experienced cyber security professional to join our team of technology enthusiasts. The right candidate should have a focus on cybersecurity compliance, security control implementation, risk/vulnerability management, continuous monitoring, and security awareness training. The role will serve as the liaison for external audits, oversee an internal cybersecurity audit program, and lead a team of GRC Analysts. This role requires a strong understanding of regulatory requirements, risk management frameworks, and industry best practices.

Responsibilities

Develop and implement GRC strategies, policies, and procedures to ensure compliance with regulatory standards and industry best practices
Lead the assessment and management of risks across the organization, including conducting risk assessments, identifying gaps, and developing mitigation plans
Collaborate with cross-functional teams to integrate GRC principles into business processes and systems
Monitor regulatory changes and industry trends to ensure the organization remains compliant and proactive in addressing emerging risks
Provide guidance and training to employees on GRC policies, procedures, and best practices
Oversee the execution of audits, assessments, and compliance activities to validate adherence to compliance standards
Act as a liaison with external auditors, regulators, and stakeholders on GRC-related matters
Develop and maintain key performance indicators (KPIs) and metrics to measure the effectiveness of GRC initiatives
Mentor and coach GRC analysts, fostering their professional development and growth within the organization
Drive the execution and continual improvement of the company's information security program, including meeting HIPAA-HITECH, state, and GDPR compliance requirements
Identify and document cyber risks and manage mitigation, follow up on open security risks, and report issues to leadership
Assist with ad-hoc compliance reporting and follow up with customers and/or support partners to ensure all identified vulnerabilities are being addressed
Provide support to Information Security Incident Response team during cyber/privacy incidents
Validate that information security requirements are built into architectures and new technology projects
Ensures the running application and developing codebase protects the confidentiality, integrity, and availability of our customer's data
Evaluate the technical security posture of newly proposed third-party solutions

Requirements

BS degree in Information Security, Risk Management, Business Administration, or related field
5+ years of experience in GRC, risk management, or related fields, with demonstrated leadership experience
Certified Information Systems Security Professional (CISSP), Certified Information Security Auditor (CISA), Certified Information Security Manager (CISM) or Certified in Risk and Information Systems Control (CRISC) strongly preferred
Strong knowledge of regulatory requirements (e.g., GDPR, HIPAA, PCI-DSS, CPRA) and industry standards (e.g., ISO 27001, NIST)
Expert in designing, implementing, and maintaining security solutions
Experience developing and implementing GRC frameworks, policies, and procedures
Excellent analytical skills with the ability to assess complex risks and develop effective mitigation strategies
Exceptional communication and interpersonal skills, with the ability to effectively collaborate with stakeholders at all levels of the organization
Proven ability to lead and manage projects, including coordinating cross-functional teams and delivering results on time
Ability to adapt to a fast-paced and dynamic environment, with a focus on continuous improvement and innovation
Expert in OWASP, CIS and/or other security standards and secure configuration baselines
Proficiency with cloud-based solutions and web related technologies

Competencies

Regulatory Knowledge - In-depth understanding of regulatory requirements and industry standards
Risk Management - Expertise in identifying, assessing, and managing risks across various business functions
Problem Solving - Identifies and resolves problems in a timely manner, gathers and analyzes information skillfully, develops alternative solutions, and works well in group problem solving situations.
Communication - Excellent verbal and written communication skills for conveying GRC concepts and requirements

Benefits

Competitive salary - $100,000-$140,000
Employer sponsored health, dental, vision, life, and disability insurance
Retirement plan with company contribution
Annual company profit sharing
Personal development/training budget
Open, collaborative work environment
Extensive 2-week onboarding plan
Comprehensive mentorship program

TherapyNotes, LLC is an Equal Employment Opportunity Employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status. All candidates whom have been given a conditional offer of employment with TherapyNotes, LLC must also undergo a criminal background check.

8/15/2024

TherapyNotes, LLC jobs

Lead GRC Analyst