Security Compliance Specialist

DescriptionKforce has a client that is seeking a Security Compliance Specialist in Los Angeles, CA.Summary:We're seeking a Security Compliance Specialist to support a leading healthcare organization's cybersecurity Governance, Risk & Compliance (GRC)/Information Assurance program. This is an excellent opportunity for a cybersecurity compliance professional who has experience with security risk assessments, control assessments, audits, policy governance, and regulatory compliance and wants to help mature an enterprise cybersecurity program.What You'll Do:* Support cybersecurity governance, risk management, compliance, and control assurance activities* Conduct and coordinate security risk assessments and control reviews across systems, applications, processes, and initiatives* Partner with control owners to collect evidence, validate security controls, identify gaps, and track remediation* Support internal and external audits, including evidence collection, findings, management responses, and corrective actions* Develop and maintain Information Security policies, standards, procedures, and governance documentation* Map security requirements and controls to frameworks including HIPAA, NIST CSF, and HHS 405(d) HICP* Maintain cybersecurity risks, findings, exceptions, and remediation plans and escalate significant or overdue items when needed* Develop KRIs, KPIs, and compliance metrics that demonstrate control effectiveness and program maturity* Support cybersecurity awareness, education, and training initiatives* Partner across Cybersecurity, IT, Privacy, Compliance, Legal, Internal Audit, and business teams* Help transition compliance activities from point-in-time audit exercises toward continuous, measurable, risk-based control assuranceRequirements* Bachelor's degree in Cybersecurity, Information Systems, IT, Risk Management, Business, Healthcare Administration, or a related field, or equivalent relevant experience* 3+ years of experience in cybersecurity, information security compliance, GRC, risk management, audit, information assurance, or a related discipline* Experience supporting cybersecurity compliance or risk management in a regulated environment* Hands-on experience with cybersecurity risk assessments, control assessments, audits, evidence collection, and remediation tracking* Experience interpreting cybersecurity policies, controls, regulations, and security frameworks* Experience developing or maintaining security policies, standards, or procedures* Strong analytical, written, verbal, organizational, and stakeholder-management skillsHighly Preferred:* Healthcare cybersecurity experience* Experience with NIST CSF* Experience developing cybersecurity compliance KRIs/KPIs* Security awareness or training experience* Strong knowledge of HIPAA* Familiarity with HHS 405(d)/HICPJob TypeDirect HireCompensation130000 - $150000