Certified HITRUST/CCSFP (1099, Pooling)

RSI Security

74d•Remote

About The Position

The Certified HITRUST CSF Practitioner (CCSFP) Consultant plays a critical role in guiding organizations through HITRUST CSF compliance. This role involves conducting comprehensive readiness assessments, performing gap analyses, and developing detailed remediation plans to enhance security and privacy controls. The consultant assists in implementing security controls, developing policies and procedures, and creating awareness programs to align client organizations with HITRUST CSF standards. Additionally, the consultant supports internal audits and prepares clients for the HITRUST certification process, acting as a liaison to ensure accurate and complete documentation.

Requirements

Active Certified HITRUST CSF Practitioner (CCSFP) certification required.
3–5 years of experience in cybersecurity, compliance, or audit, with direct involvement in HITRUST or similar frameworks.
Strong understanding of the HITRUST CSF and how it maps to other standards such as NIST, HIPAA, ISO 27001, and PCI DSS.
Demonstrated experience performing gap assessments, control implementation, and compliance documentation.
Excellent communication skills with the ability to translate technical requirements into business-friendly guidance.

Nice To Haves

Bachelor’s degree in Cybersecurity, Information Systems, or a related field preferred.
Experience supporting clients in regulated industries (e.g., healthcare, finance) is a plus.
Familiarity with HITRUST MyCSF portal and evidence management preferred.

Responsibilities

Conduct HITRUST readiness assessments to evaluate client compliance posture against HITRUST CSF requirements.
Identify security and privacy control gaps and deliver actionable remediation plans to support certification readiness.
Advise clients on the design and implementation of security controls aligned with HITRUST and other relevant frameworks (e.g., NIST, HIPAA).
Develop or refine policies, procedures, and supporting documentation to align with HITRUST CSF control requirements.
Provide guidance and subject matter expertise throughout the HITRUST certification process, including MyCSF readiness and evidence validation.
Deliver client-facing training and awareness on HITRUST program requirements, reporting, and control maintenance practices.
Support internal audit activities and assist clients in preparing for formal validation and certification engagements.
Collaborate with internal teams to share insights, improve processes, and align engagement delivery with industry best practices.