Senior Security Risk Management Consultant (Healthcare)

TL;DR

Senior Security Risk Management Consultant (Cybersecurity): Leading enterprise-wide security risk management strategies and third-party risk programs with an accent on regulatory compliance, HIPAA alignment, and GRC platform integration. Focus on translating complex technical findings into actionable business insights for senior leadership and driving continuous improvement in security governance.

Location: Must be based in the United States. Occasional travel (10% or less) to hirify.global sites may be required.

Company

hirify.global is a large, mission-driven healthcare organization committed to providing compassionate, person-centered care.

What you will do

• Lead complex risk assessments and guide risk treatment strategies across the enterprise.
• Manage the third-party cyber risk lifecycle, including due diligence and control assessments.
• Translate technical security findings into clear business risk insights for executive stakeholders.
• Develop and monitor key risk indicators (KRIs) and key performance indicators (KPIs).
• Coordinate regulatory audits and ensure organizational readiness and compliance.
• Mentor team members and provide subject matter expertise on risk-based prioritization.

Requirements

• Must be based in the United States.
• Bachelor’s degree or equivalent combination of education and experience.
• Minimum 7 years of experience in information services, including 3 years in cybersecurity GRC.
• Minimum 3 years of experience in healthcare or other highly regulated industries.
• Strong knowledge of HIPAA Security Rule and frameworks like NIST, ISO 27001, or HITRUST.
• Active security certification required (e.g., CISSP, CISA, CISM, CRISC, or GRCP).
• Proficiency with GRC platforms such as ServiceNow GRC, RSA Archer, or OneTrust.

Nice to have

• Master’s degree from an accredited institution.
• Experience with risk quantification models like FAIR.
• Familiarity with data visualization tools such as Tableau or Power BI.
• Experience leveraging AI for automation and predictive analytics in risk management.

Culture & Benefits

• Commitment to a mission-driven, inclusive, and collaborative work environment.
• Focus on professional growth, mentorship, and career development pathways.
• Opportunity to influence enterprise-level security strategy in a large-scale healthcare setting.
• Equal Opportunity Employer dedicated to honoring the dignity and unique perspectives of every colleague.