Position Details

Salary $110K – $140K USD / year

Type Full-Time

Experience mid

Exp. Years 5–7 years

Education Not specified

Category Cybersecurity

About this role

Global healthcare vendor seeks a Cyber Risk and Compliance Specialist to own IT SOX/ITGCs, HIPAA/NIS2 alignment, and security-awareness programs. The role balances technical auditing with risk advisory and policy promotion across enterprise applications, cloud environments, and governance programs.

Key Responsibilities

Lead IT SOX program and test ITGCs/ITACs/IPE
Translate between technical teams and auditors
Deficiency root-cause analyses and remediation planning
HIPAA/NIS2 risk advisory and procurement risk assessments
Security Awareness program development and policy translation

Technical Overview

Hands-on experience with ITGCs/ITACs, HIPAA Security Rule, NIS2, and frameworks (NIST 800-53, ISO 27001, NIST CSF, COBIT). Familiarity with SAP ECC/S4 HANA, Azure, AWS, and GRC tools (Auditboard, Workiva). Requires strong communication with stakeholders and external auditors.

Ideal Candidate

The ideal candidate is a mid-to-senior cyber risk and compliance professional with 5-7 years of IT audit/compliance experience. They excel at IT SOX, HIPAA, and NIS2, and can translate technical controls into business terms while driving a multinational compliance program and security-awareness culture.

Must-Have Skills

5–7 years IT Audit / IT Compliance / Cyber RiskSOX 404 (ITGCs) expertHIPAA Security Rule knowledgeNIS2 Directive knowledgeNIST 800-53 / ISO 27001 / NIST CSF / COBIT experienceCISA highly preferred; CISSP or CRISC major plusERP systems (SAP ECC/S4 HANA) experienceAzure and AWS cloud environmentsGRC systems such as Auditboard or Workiva

Nice-to-Have Skills

CISSPCRISCAuditboard experienceWorkiva experienceNCQA standards familiarity

Tools & Platforms

AuditboardWorkivaSAPSAP ECCSAP S/4HANAAzureAmazon Web ServicesCMSCAQHPECOSNPPESNPIOIGLEIENPDBSAM

Required Skills

5–7 years IT Audit/IT Compliance/Cyber RiskSOX 404 (ITGCs)HIPAA Security RuleNIS2NIST 800-53ISO 27001NIST CSFCOBITSAP ECC/S4 HANAAzureAWSAuditboardWorkivaNCQA/CMS/CAQH/PECOS/NPPES/NPIGRC

Hard Skills

IT SOXIT General ControlsITGCsIT Application controlsITACsIPEHIPAA Security RulePHINIS2 DirectiveNIS2NIST 800-53ISO 27001NIST CSFCOBITCISACISSPCRISCSAP ECC/S4 HANASAPAzureAmazon Web ServicesAWSAuditboardWorkivaCMSOIGLEIENPDBSAMCAQHPECOSNPPESNPI

Soft Skills

Stakeholder communicationAnalytical thinkingProblem solvingAttention to detailTeam collaborationTraining & educationChange managementStrategic thinking

Certifications

Preferred

CISACISSPCRISC

Industry & Role

Industry Healthcare & Medical

Job Function Lead IT risk, compliance, and security program for a healthcare medtech company

Role Subtype GRC Analyst

Keywords for Your Resume

Cyber RiskIT SOXIT General ControlsITGCsIT Application controlsITACsIPEHIPAA Security RulePHINIS2 DirectiveNIS2NIST 800-53ISO 27001NIST CSFCOBITCISACISSPCRISCSAP (ECC/S4 HANA)SAPAzureAmazon Web ServicesAWSAuditboardWorkivaCMSOIGLEIENPDBSAMCAQHPECOSNPPESNPI

Deal Breakers

Must have 5–7 years IT Audit / IT Compliance / Cyber Risk, Experience with SAP ECC/S4 HANA, Proficiency with AWS/Azure, CISA/CISSP/CRISC preferred

Apply for this Position →

Get matched to jobs like this

Luna finds roles that fit your skills and career goals — no endless scrolling required.

Create a Free Profile