Hi

Please lookup the below position and if you feel comfortable ,then please
send me your updated resume

*Role               :       **Compliance Project and Documentation
Specialist *

*Location       :       **Shrewsbury, MA *

*Duration      :       12+ Month open ended*

*Interview    :       Phone then Face to Face  *



*REQ. SKILLS:   **Compliance Project and Documentation Specialist *



*Job Requirement*



·         At least 5 years’ experience developing or improving technical
documentation in support of compliance requirements

·         Experience working with *an audit firm *to assess technical
controls

·         Strong understanding of information technology control
requirements

·         Understanding of relevant state and federal regulations that
drive security requirements (HIPAA, FISMA, FERPA, etc.)

·         Ability to collaborate closely with both technical and business
stakeholders

·         Ability to document clearly and effectively required policies,
standards and procedures

·         Strong MS Word, Excel and Power Point capabilities

·         Ability to present findings and recommendations to senior
management.



*Preferred Qualifications:*



·         Demonstrative knowledge of IT and information security frameworks
and standards such as ISO/IEC 27000, NIST, CoBit, HiTRUST, etc.;

·         SSAE16 / SOC 2 experience

·         Understanding of NIST 800-53 control framework




*Job Description*

·         The *Compliance Project and Documentation Specialist *position is
responsible for ensuring that required documentation in support of
Information Technology Policies, Standards and Procedures (SOP’s) are
developed. In addition, this individual will play a key role in assisting
in the ongoing preparation and facilitation of a SOC 2 data center and
technical control audit.

·         The *Compliance Project and Documentation Specialist* will
collaborate with other information security and information technology team
members, especially around technical risk assessment, policy, standards,
and gap analysis as they relate to required control design and supporting
administrative documentation.

·         Experience with participating in a SSAE16/18 external audit and a
solid understanding of SOC 2 principles, HIPAA and NIST 800-53 controls is
desired.

·         A solid understanding of how a third-party audit report relates
to security, availability, processing integrity, confidentiality, and
privacy of systems is also desired. This individual must possess
exceptional documentation and organizational skills and be well versed in
creating technical Standard Operating Procedures (SOP’s).





*Specific goals for the contract resulting from this RFQ include:*



   - Development or improvement of necessary policies, standards and SOP
   documentation in support of an overall control maturity and SOC 2 audit
   initiative
   - Play a key role in an external third-party review of key UMMS controls
   - Manage the documentation initiative to ensure that University
   policies, standards and procedures meet technical control objectives
   - Work closely with both technical and business stakeholders to ensure
   documentation is aligned to requirements
   - Work closely with functional groups or departments to prioritize and
   remediate observations
   - Ensure that documentation is maintained, organized appropriately and
   accessible to key stakeholders

·         Perform other duties as required.











[image: cid:[email protected]]



Neha Saral

VSG Business Solutions

221 Cornwell Dr Bear, DE

[email protected]

Phone: 302-261-3207 Ext: 107

GTalk:[email protected]

P Please consider the environment before printing this email

Important!  This message is intended only for the use of the individual or
entity to which it is addressed and may contain information that is
privileged, confidential, and exempt from disclosure under applicable law.
If the reader of this message is not the intended recipient, or the
employee or agent responsible to deliver it to the intended recipient, you
are hereby notified that reading, disseminating, distributing, or copying
this communication is strictly prohibited.  If you have received this
communication in error, please immediately notify us by telephone, and
discard the original message.  Thank you.

-- 
You received this message because you are subscribed to the Google Groups 
"Android Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at https://groups.google.com/group/android-developers.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/android-developers/CAJdfOTT43C1uY-pFOYYQuKP8veSQnnM-f2kQJLQ0Vnz7zQpN2Q%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to