Information Security Risk Governance Specialist

- Act as the key contact for external audits, assessments, and regulatory inquiries - Create and manage compliance documentation, including policies, procedures, and control matrices - Design and lead necessary assessments to meet compliance mandates and certifications (HIPAA, PCI DSS, SOC II, Type 2, etc.) - Perform internal gap analyses and risk assessments to pinpoint areas of non-compliance or control flaws - Monitor and report on audit discoveries, remediation activities, and compliance status to senior management - Collaborate with various teams throughout the organization to ensure alignment with regulatory requirements and enterprise risk goals - Provide expert advice during product development, vendor onboarding, and system implementations to ensure compliance is integrated into processes - Work on maintaining and enhancing internal control frameworks in line with regulatory standards and industry best practices (e.g., NIST, HITRUST, ISO) - Ensure policies and procedures are current and reflect the latest regulatory expectations and organizational practices - Initiate continuous monitoring for vital compliance controls, findings, and mitigation strategies - Compile and deliver compliance metrics, dashboards, and executive summaries to leadership and governance committees