Security Standards Specialist

Job Title: Security Standards Specialist

Job Location: Remote

About us:

Softheon is a dynamic and forward-thinking Software as a Service (SaaS) organization that is dedicated to ensuring affordable, accessible, and plentiful healthcare for every American. We are a pioneering force in the healthcare technology industry, driven by our mission to empower individuals and organizations with innovative solutions that transform the healthcare landscape. Our commitment to improving healthcare access and delivery is unwavering, and we are looking for top-tier talent to join our journey and contribute to our vision. If you're seeking an environment where your contributions are impactful and deeply valued, don't just join a company with ambition. Align with a purpose backed by a committed company.

Our Company Culture:

Our culture is built on collaboration, innovation, and appreciation. We value each employee's unique talents and contributions and understand that every individual plays a critical role in our mission to transform healthcare. Every day, we celebrate our team's dedication, creativity, and expertise, which drive us closer to our goals.

At Softheon, Our Mission is powering growth to make healthcare more productive, intelligent, and successful. Our Vision is Making healthcare affordable, accessible, and plentiful for every American.

About the role:

As a Security Standards Specialist at Softheon, your role is pivotal in guiding our organization through the intricate landscape of cybersecurity standards and regulations, particularly within the healthcare sector. Your expertise will ensure that Softheon not only meets but exceeds the necessary compliance standards, safeguarding our data and systems against emerging threats. You'll work closely with both the cybersecurity team and the CISO, providing strategic insights and ensuring our practices align with frameworks like NIST, HIPAA, and SOC.     

Requirements

You will:

• Conduct analyses to align our security practices with critical frameworks, constantly updating our policies to reflect the latest in security standards. 
• Lead our efforts in preparing for and coordinating technical security audits, presenting documentation, and ensuring audit readiness. 
• Review our security processes and systems, ensuring compliance and recommending improvements. 
• Foster a culture of cybersecurity awareness across departments, enhancing our collective defense mechanisms. 
• Serve as a liaison between the cybersecurity team and the GRC team, facilitating a cohesive approach to organizational compliance. 
• Drive continuous improvement in our security standards framework, staying ahead of emerging threats and advancements in cybersecurity. 
• Engage with stakeholders to integrate their feedback into our security standards, emphasizing the importance of compliance and secure practices. 
• Evaluate vendors and third parties to ensure their adherence to our security standards, guiding the selection process to align with our security objectives. 
• Commit to continuous learning, keeping abreast of the latest trends and advancements in cybersecurity, especially those pertinent to the healthcare sector. 
• This position will require you to work EST hours.

You have:

• A Bachelor's degree in Computer Science, Cybersecurity, or a related field. 
• At least 6-10 years of experience in (cybersecurity) security operations, with a solid understanding of security technologies and protocols. 
• Previous implementation of Security Frameworks including PCI, NIST, ISO, SOC 2, and HIPAA. 
• Excellent communication skills, with an emphasis on collaboration and continuous improvement.  
• Experience with healthcare IT environments and a deep understanding of the specific threats and regulations in the healthcare sector. 

Certifications: 

• Required:
• Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900)
• CISA, CRISC, CISSP, GIAC, or CISM
• Preferred:
• Hi-Trust Certified
• CompTIA Security+
• PCI Professional (PCIP)

Benefits

What we offer:

Salary - $125,000 - $150,000/yr

Softheon offers every full-time employee a comprehensive benefits package including: 

Opportunity to work on cutting-edge cloud-based healthcare solutions; 

Work from your home company with a one-time home office stipend; 

Excellent benefits package that includes health, vision and dental coverage for you, your spouse and dependents; 

Additional benefits, including a monthly wellness stipend and internet stipend, 401K w/ a match; immediately vested, employee assistance program, disability/life insurance, and parental leave; 

15 days to discretionary PTO based on YOS plus 9 additional holidays; 

Referral bonuses, discretionary bonus program, spot bonuses and professional development opportunities; 

An opportunity for you to be part of a team committed to improving healthcare access and affordability by leveraging innovative technology solutions; 

*Please note that candidates applying for this position, must currently reside within the United States.

Join Softheon, and together, we'll shape the future of healthcare in America.

Are you ready to make a difference? Join us at Softheon and help revolutionize healthcare for all.

At Softheon, we embrace and celebrate diversity in all its forms as an equal opportunity employer. We strongly believe that employing a diverse workforce is key to our success. Our recruitment and hiring decisions are made solely on the basis of each candidate's qualifications, experience, and skills. We highly appreciate your dedication to our shared mission of making healthcare affordable, accessible, and abundant for all. Join us in our journey towards continually building a diverse and inclusive workplace, where everyone’s contributions are valued, respected, and celebrated.

Employment with Softheon is at-will, which means either the employee or Softheon may terminate the employment relationship at any time, with or without cause, and with or without notice. Nothing in this job description or in any document or statement shall be construed to constitute a guarantee of employment for a specified period of time.