Consultant, Healthcare Compliance Advisory

About Coalfire Coalfire is on a mission to make the world a safer place by solving our clients’ hardest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape. We are headquartered in Chicago, Illinois with offices across the U. S. and U. K. , and we support clients around the world. But that’s not who we are – that’s just what we do. We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference. Position Summary The Healthcare Advisory Consultant supports client engagements by identifying gaps, evaluating security and compliance controls, developing documentation, supporting client discussions, and preparing reports. The Consultant applies a working understanding of relevant frameworks and technology environments to support healthcare and life-sciences clients, including environments involving HIPAA, HITRUST, NIST-based frameworks, and ARC-AMPE for Medicare and Medicaid-related advisory work. The Consultant performs assigned workstreams with direction from a Senior Consultant, Project Manager, Delivery Director, or other engagement lead. The role is expected to manage assigned tasks and deliverables, communicate risks and dependencies early, apply quality standards, and provide practical recommendations within the scope of assigned work.

The Consultant collaborates with project managers and delivery team members to meet project timelines and support strong client outcomes. What You'll Do - Support security and compliance consulting for cloud-based, hybrid, and on-premises healthcare environments in accordance with applicable requirements and guidance, including ARC-AMPE, NIST SP 800-53, NIST SP 800-30, HITRUST, HIPAA, and emerging healthcare standards and frameworks. - Manage assigned priorities and tasks to meet delivery timelines, utilization expectations, and quality standards; raise schedule, scope, resource, or evidence issues early. - Support client SME interviews, workshops, readouts, and status meetings; co-facilitate assigned portions of sessions when appropriate. - Assist with the development of System Security Plans, configuration management plans, information system security policies, rules of behavior, privacy impact analyses, IT contingency and business continuity plans, incident response plans, , as applicable to the engagement. - Support advisory projects, including risk assessments, gap analyses, assessment readiness, system security plan development, policy and procedure development, and other consulting services. - Collect, organize, and interpret client information and evidence; map information to applicable requirements; and identify potential compliance and risk implications for engagement lead review. - Prepare, update, and quality-check client deliverables, including compliance documentation, reports, policies, procedures, plans, evidence matrices, and workpapers. - Support engagement planning by reviewing contractual requirements, agendas, data requests, action items, schedules, and assigned responsibilities. - Review technology, control evidence, and configurations related to cloud infrastructure, identity and access management, MFA, user access lifecycle, privileged access, access reviews, logging and monitoring, vulnerability management, incident response, endpoint security, and network security, as applicable to the engagement. - Support engagements involving business continuity and disaster recovery, incident response, and vendor risk management. - Translate technical requirements and security findings into clear, practical recommendations for review by engagement leads and use with technical and non-technical stakeholders.