Senior/Lead Security Engineer - HIPPA

Responsibilities

• Convert HIPAA gap analyses, NIST 800-53 privacy controls, and audit findings into scoped Azure DevOps Features/Stories/Tasks with defined acceptance criteria, effort estimates, and a designated owner
• Keep the backlog organized across ongoing compliance features, including access control, data classification, log scrubbing, audit logging, data retention & deletion, and data access restrictions
• Develop and run test cases to confirm controls function as intended, such as privileged-access restrictions, time-bound SailPoint access, PII minimization, and deletion-on-request, then document pass/fail results
• Manage the intake, tracking, and completion of third-party auditor evidence requests, such as Schellman FedRAMP Significant Change Reviews
• Link each audit request to its corresponding NIST 800-53 control and work with engineering, ISRM, Privacy, and Legal to collect artifacts and meet the auditor's timeline
• Generate ongoing compliance status reports for stakeholders
• Create simple automation tools, such as scripts, dashboards, and evidence pipelines, to cut down manual work in future audits as the program expands to new clients and jurisdictions
• Collaborate with ISRM, Privacy Office, Legal, SRE, and cloud platform teams to document which controls are inherited from AWS/Azure versus those that must be developed or maintained internally

Languages