Hippa/SOX Compliance Sustainability Lead - Business Consultant Consult

Security and Compliance business analyst/engagement consultant (CG28742)

Pasadena, CA, 91124

12+ Month Contract

Contract Terms:  W2

SOX Compliance Sustainability Lead - Business Consultant Consultant/Specialist 

Job Summary: 

The Compliance Sustainability Lead provides subject matter expertise from technical, project management and business consulting perspectives in support of Care Delivery BIO Compliance activities. Members of this team work across a number of SOX, HIPAA and PCI related initiatives to ensure appropriate processes, procedures and controls are adequately designed, implemented or remediated to meet audit and compliance expectations, operating efficiency goals, and other business objectives. 

The continued evolution of Health Care reform has driven unprecedented changes in the regulatory and Compliance landscape within the Health Care industry. In the Care Delivery BIO, you will be responsible for partnering with business and technology constituencies to address these evolving challenges by embedding risk management and compliance management competencies into day to day activities. The success of this team requires dedicated professionals who possess the analytical, feasibility, relationship and executive summary skills needed to form highly reliable risk management strategies to meet various Compliance requirements. 

At the Consultant/Specialist level, you will provide advanced compliance analysis and consultation for the Care Delivery BIO Compliance Organization. In addition, you will possess the analytical, feasibility, business case and executive summary skills needed to form highly reliable risk management strategies to meet various compliance requirements. 

Essential Functions: 

1. Developing an in depth understanding of the broad regulatory landscape impacting business areas. Remain current with emerging regulatory sentiments as well as solution trends in the marketplace. 
2. Assessing the impact of laws and regulations on systems and technology. Work with other risk organizations to shape organizational control policies and standards. 
3. Lead risk/security assessment studies to validate perceived risks. Perform interviews, document design assessments, and walkthroughs of key controls (both new and existing). 
4. Lead cross-functional remediation teams in developing processes using requirements gathered from clients and engineering. 
5. Exhibit pragmatism in formulating process remediation and implementation strategies, defining work tracks; and submitting assessment findings and recommendations 
6. Design sustainment strategies and measurement systems to ensure that requirements can continue to be maintained over time. 
7. Develop and nurture trusted relationships with Business Partners, IT Executives, Security collate and produce executive summary presentations related to findings and recommendations; develop design and drive remediation work streams. Other tasks may include working with project teams, participating in the development of design requirements, business cases to ensure compliance requirements are met. Work proactively with project and program managers to resolve issues. 

Basic Qualifications: 

1) Bachelor's degree in a related subject and/or 4 years of equivalent experience. 
2) A minimum of 12 years of experience in documenting functional requirements, analyzes business process, and develops business cases to support IT solutions. 
3) 5+ years technology risk management experience and 5+ years HIPAA/OCR audit experience in a highly regulated industry.

This would include the following disciplines: 
1. Current information security and compliance vendor landscape 
2. Control frameworks/regulatory requirements such as HIPAA/HITECH 
3. Candidate should demonstrate versatility with a track record of experience in interpretation and application of a broad spectrum of regulatory imperatives. 

4) Proven experience in performing broad scale, complex IT security defining engagement scope, negotiating commitments, gathering requirements, defining deliverables, designing integrated solutions, and overseeing technical implementations considered a plus 
4) Five years experience as a compliance auditor with strong ITGC (all domains) and information security background including current vulnerabilities 
5) Proven experience proposing enterprise level solutions to mitigate risk of receiving a material weakness in IT general controls
5) Experience in the health care industry 

Minimum number of years of experience required 
1. 12 years analysis/business case preparation 
2. 5 years IT risk management 
3. 5 years HIPAA experience 

Top 3 - 5 Daily responsibilities 
1. Writing integrated compliance narratives (SOX) and implementing compliance design 
2. Preparing evidence for internal testing and OCR audits 
3. Remediating out of compliance events 

Top 3 - 5 Required Skills 
1. Writing: Ability to clearly and succinctly translate compliance requirements into written compliance manuals. 
2. Execution: Ability to drive execution and implementation of compliance design and remediation while working alone or with others. 
3. Ability to advise strategically based on technical expertise 
4. Ability to assess requirements around new projects quickly 

Desired skills 
Knowledge of and experience with SOX consulting firm auditors & PCI external examiners. 

Soft Skills 
1. Ability to listen and intake from multiple sources 
2. Comfort with juggle multiple work efforts simultaneously 
3. Flexibility with job assignments 
4. Team leader and team builder with a positive/constructive outlook 

# of people supervised/size of team 
Preferably a history that includes min. 3-5 years of management - staff of 3 or more 
Stage of the project 
The project is newer but not completely new. Documentation previously developed will be provided for further development. 

Educational Requirement:
Min. education BS or BA degree and/or 4 years equivalent experience. 
Will this Req convert to a FTE position? If so, do you only want to see individuals eligible to convert to FTE status? 
This is a Contract to Hire position. I would like to only see individuals interested and eligible for conversion to FTE. 
Do you require a face to face interview, or will you hire from a phone interview 
At least 2 Face to Face interviews will be required. 
Can the contractor work remotely or do they need to be onsite. 
Contractors will work on site during business hours. Contractors with an unusually long commute or who may experience personal hardship being in the office 5 days a week may not be considered. 

Does this position require a health screen? 
No.