Wellsky
From Wellsky's careers page
Status: listed on the employer's own careers page when we last checked (daily). Confirm on their site before applying.
The Compliance Controls Manager is responsible for partnering with organizational leaders to provide direction and guidance related to WellSky’s compliance programs. The scope of this job includes managing IT controls matrix, mapped across SOC 1, SOC 2, HiTrust CSF, HIPAA Security rule, PCI DSS and NIST CSF and ensure overall compliance with applicable laws, regulatory requirements, policies, and procedures.
This position is based at WellSky’s World Headquarters in Overland Park, KS. We invite you to apply today and join us in shaping the future of healthcare!
Partner with business and technical owners for system descriptions, scoping, trust service criteria and development, implementation, and communication of compliance controls
Draft, revise, and maintain inventory of technology compliance policies and procedures consistent with changing compliance requirements
Develop and maintain systems to support continuous monitoring and reporting using GRC platform and automated evidence collection
Serve as primary contact for managing technology compliance initiatives with external auditors e.g. SOC reports, HiTrust, PCI DSS
Lead assurance engagements including the annual SOC 1 Type II and SOC 2 Type II examinations from scoping through report issuance
Triage and resolve control exceptions, incident investigations, write management actions plans, root cause analysis and drive corrective action plans to closure
Perform other job duties as assigned
Bachelor’s degree or equivalent work experience
At least 4-6 years of experience in technology governance, risk and compliance, IT auditing or IT Risk Advisory
Working knowledge of NIST CSF or NIST 800-53, HIPAA Security rule and HiTrust CSF
Experience in healthcare technology, SaaS or other regulated environment handling PHI, testing cloud controls and identify platforms
Industry leading certifications e.g. CISA, CISM, CRISC, CCSFP
Big 4 or public accounting governance, risk and controls experience is a plus
Strong working knowledge of IT general controls, COSO, AICPA trust services criteria
Hands-on experience leading SOC examinations, from either the service organization or auditor side
Willing to work additional or irregular hours as needed
Must work in accordance with applicable security policies and procedures to safeguard company and client information
Must be able to sit and view a computer screen for extended periods of time
#LI-Onsite
#LI-OF1
WellSky is where independent thinking and collaboration come together to create an authentic culture. We thrive on innovation, inclusiveness, and cohesive perspectives. At WellSky you can make a difference.
Here are some of the exciting benefits full-time teammates are eligible to receive at WellSky:
Excellent medical with Rx, dental, and vision benefits
Mental Health support through EAP
Generous paid time off, plus 13 paid holidays
100% vested 401(K) retirement plans
Educational assistance up to $2500 per year
WellSky provides equal employment opportunities to all people without regard to race, color, national origin, ancestry, citizenship, age, religion, gender, sex, sexual orientation, gender identity, gender expression, marital status, pregnancy, physical or mental disability, protected medical condition, genetic information, military service, veteran status, or any other status or characteristic protected by law. WellSky is proud to be a drug-free workplace.
Applicants for U.S.-based positions with WellSky must be legally authorized to work in the United States. Verification of employment eligibility will be required at the time of hire. Certain client-facing positions may be required to comply with applicable requirements, such as immunizations and occupational health mandates.
Data Privacy Notice for Job Applicants and Teammates
A free account lets you apply, save this job, see how well you match and check your resume against it.
Scores your resume against this job the way resume scanners do: the job's hard and soft skills, searchability, recruiter tips and formatting.
Create a free account to see your score. Your resume stays in this browser until then, and we never store it.
Already a member? Sign in