4745-Security Engineer II (GRC)

Innovaccer Analytics

6h

About The Position

We at Innovaccer are looking for a Security Engineer - II (GRC) who will be responsible for Governance, Risk & Compliance activities within our Cyber Security team across internal, customer, commercial and public-sector environments. This role will encompass Security Questionnaires, RFPs, Vendor Risk Management, Internal and External Audits, Security & Privacy Policies, Regulatory Compliance, Data Security, and Federal/State Compliance Programs. The role will provide exposure to multiple security domains and cloud platforms while supporting Innovaccer's growing healthcare, public-sector, and AI security programs.

Requirements

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field preferred
• 4-6 years of prior experience in Information Security Risk & Compliance / GRC
• Hands-on experience with implementation or assessment of HIPAA, SOC 2 Type II, ISO 27001, HITRUST, or similar security and compliance frameworks
• Strong understanding of security, privacy, risk, governance, and compliance controls
• Experience with Vendor Risk Assessment / Third-Party Risk Management
• Experience responding to RFPs, security questionnaires, customer assessments, and legal/security exhibits
• Experience working with internal teams for audit, compliance, and evidence collection activities
• Familiarity with US federal and state security and compliance frameworks, including FedRAMP, GovRAMP/StateRAMP, NIST SP 800-53, MARS-E, and ARC-AMPE
• Understanding of POA&M, Continuous Monitoring (ConMon), security assessments, authorization processes, SSP, and 3PAO assessment activities
• Familiarity with GDPR, HITECH, US state privacy/security regulations, and Middle-East privacy regulations including PDPL
• Familiarity with cloud environments such as AWS, Azure, and/or GCP
• Strong documentation, analytical, communication, and stakeholder-management skills
• Able to work independently, multitask, prioritize, and manage time effectively
• Collaborates effectively and communicates efficiently with technical and non-technical stakeholders
• Willingness to work with teams and customers across the US and Middle-East time zones

Nice To Haves

• ISO 27001 LA/LI, CISA, CRISC, or other relevant security and compliance certifications.

Responsibilities

• Responding to RFPs & Security Questionnaires.
• Coordinating with RFP, Legal, Privacy, Product, Engineering, and IT teams on security questionnaires, security exhibits, BAA/MSA/DPA queries, and customer follow-ups
• Experience performing Risk Assessments, Business Impact Analysis (BIA), Business Continuity/Disaster Recovery, and Tabletop Exercises
• Analyzing and updating existing security, privacy, and compliance policies, procedures, and documentation
• Supporting implementation of privacy, data protection, and security controls
• Driving Vendor Risk Assessment & Third-Party Risk Management activities
• Supporting internal and external audits including SOC 2 Type II, HIPAA, HITRUST, ISO 27001, and other applicable frameworks
• Supporting FedRAMP, GovRAMP/StateRAMP, and public-sector compliance initiatives.
• Supporting control implementation and assessment aligned with NIST SP 800-53.
• Maintaining and tracking POA&M, remediation activities, risk registers, and control gaps.
• Supporting Continuous Monitoring (ConMon) activities and audit/assessment evidence collection.
• Coordinating with internal teams for gathering, validating, and presenting audit and compliance evidence.
• Supporting third-party assessments and coordination with 3PAOs and external auditors
• Identifying control gaps/weaknesses and formulating action plans to address them
• Supporting security and privacy requirements across US healthcare, federal/state, and Middle-East regulations.
• Supporting AI governance and security initiatives, including ISO 42001 and NIST AI RMF.

Benefits

• Generous PTO Benefits: Enjoy PTO benefit accrual of 20 days per year.
• Parental Leave: Experience one of the industry's best parental leave policies to spend time with your new addition.
• Rewards & Recognition: Unlock your potential and be rewarded generously with both monetary incentives and widespread recognition for your dedication and outstanding performance.
• Insurance Benefits: We offer medical, dental, and vision benefits along with 100% company-sponsored short and long-term disability and basic life insurance. Legal aid and pet insurance options are available at a discounted rate.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level