Information Security Assurance Advisor

General Skills

• Flexibility and ability to shift to operational hands-on activities as needed
• Conform to shifting priorities, demands and timelines through analytical and problem-solving capabilities
• Client management experience
• Speed and quality of deliverable is the key
• Excellent communication and presentation skills

Technical/Domain Skills

• Required: Demonstrated hands-on experience managing at least one complete HITRUST readiness and validated assessment cycle, including scoping, requirement interpretation, evidence validation, assessor coordination, gap remediation, and certification support.
• Required: Demonstrated hands-on experience managing at least one complete SOC 2 Type II examination cycle, including control mapping to the AICPA Trust Services Criteria, observation-period evidence, control-owner coordination, sample requests, auditor inquiries, exceptions, complementary user entity controls, subservice organization considerations, remediation, and report review.
• Required: Demonstrated practical experience using Vanta to execute audits—not solely view dashboards—including framework and control administration, ownership assignments, system integrations and automated tests, policy and document management, evidence mapping and review, auditor collaboration, issue tracking, remediation workflows, and audit-readiness reporting.
• Preferred: Knowledge or work experience with HIPAA, PCI DSS, TX-RAMP, NIST Cybersecurity Framework, and cross-framework control mapping.

Education