Information Systems Security Manager
Current-- Coordinate third-party security audits (SOC 2 Type II, penetration/vulnerability testing)-- Drive compliance with security standards, working toward: HIPAA, NIST 800-53 rev 5 (FedRAMP/FISMA), HITRUST, ISO-27001, GDPR, CCPA, Privacy Shield-- Manage security related documentation, policies, procedures, training-- Respond to security risk assessments / questionnaires from clients and prospects-- Respond to security threats-- Perform internal audit on security controls to ensure secure practices (SaaS coding, database, premises)