IT Security Specialist I

We are seeking an IT Security Specialist I to support IT compliance, security governance, risk assessments, and audit activities. The ideal candidate will have at least 5 years of IT compliance, assessment, or audit experience, with strong communication skills and knowledge of HITRUST CSF and other security frameworks.

Key Responsibilities

• Evaluate IT controls and compliance against HITRUST CSF.
• Interview SMEs, review evidence, and perform control testing.
• Identify risks, analyze root causes, and recommend improvements.
• Coordinate audits, evidence collection, remediation tracking, and auditor communications.
• Prepare compliance reports, dashboards, metrics, and KPIs.
• Use GRC tools to manage assessments and remediation plans.
• Collaborate with internal stakeholders to support compliance and audit readiness.

Required Qualifications

• 5+ years of IT compliance, IT assessment, or IT audit experience.
• Knowledge of GRC principles and security frameworks, including HITRUST CSF, NIST CSF, ISO 27001, or COBIT.
• Experience testing IT controls across systems, applications, databases, and operating systems.
• Experience coordinating the audit lifecycle and managing audit evidence.
• Strong written and verbal communication skills.

Preferred Qualifications

• Bachelor's or master's degree in a related field.
• Certifications such as CISSP, CISA, CISM, CPA/CA, or equivalent.