IT Security and Compliance Specialist

Description

The IT Security and Compliance Specialist serves as the primary point of contact for internal and external client security assessments and IT policy and control enforcement.

• Coordinates monitoring the organization’s security posture and coordinates incident response, threat detection, and remediation activities
• Contributes to the SOC2 Type II assessment process, including evidence gathering, auditor communication, and remediation tracking
• Serves as the main point of contact for client security questionnaires, risk assessments, and contractual data protection requirement
• Maintains, and enforces IT security policies, standards, and procedures based on industry best practices
• Conducts internal audits and risk assessments using established frameworks and templates
• Maintains documentation for vendor security assessments and performs third-party risk management
• Collaborates with IT infrastructure, application development, and data teams to implement and document security and privacy controls

• Bachelor’s degree in information security, Information Technology, Computer Science, or related field of study from an accredited college or university
• 0 - 2 years of experience or equivalent education / internships
• Exposure to SOC 2, HIPAA, or other regulatory/compliance frameworks preferred
• Security certifications such as CISSP, CISA, CISM, CompTIA Security+, or equivalent are preferred

• Professional/friendly demeanor and ability to excel in a team-oriented environment
• Detail-oriented with a strong ability to identify gaps and mitigate risk
• Self-motivated and able to operate independently

• Medical Insurance (high deductible plan with an HSA)
• Dental Insurance
• Vision Insurance
• Short-term and long-term disability paid by the company
• Group term life paid by the company
• PTO - 160 hours (4 weeks) with the ability to roll over 40 hours and cash out 40 hours at the end of the year
• Fitbit program with monetary rewards
• Employee recognition programs with monetary rewards
• Corporate office amenities - specialty coffee machines, assorted tea options, smoothie bar, collaborative work spaces, fruit provide by company and an onsite market
• Regular employee events such as potlucks, video game tournaments, door decorating contests, Mental Health Awareness Month activities, and a company carnival just to name a few of our past events

Prime Health Services (PHS) is a national medical cost containment company with a noteworthy PPO Network used by insurance carriers, TPA’s, self‑insureds, and governmental entities. Our tech‑focused nature allows clients to take advantage of the flexibility of customization while not compromising on bill processing speed. Since 2001, we have specialized in medical provider network development and offer clients a tailored approach to medical cost containment: quality health care at discounted rates.