Sr Engineer, Governance, Risk & Compliance

Education Required:

Experience Required:

License/Certification Required:

Knowledge, Skills & Abilities:

• Knowledge of: Governance, Risk & Compliance (GRC), information security and cybersecurity principles, phishing campaigns, cybersecurity awareness and training, risk assessments, risk registers, security frameworks, standards, guidelines, controls, federal and state security regulations and trends, data protection, administrative, technical and physical security controls, third-party risk management (TPRM), audit and compliance operations, privacy management, business continuity, AI governance, workflow automation, and enterprise GRC platforms. IT/security processes or technologies such as IAM, PAM, MFA, RBAC, SSO, DLP, Identity Governance, Risk Register, ServiceNow, CMDB, ITSM, vulnerability management, DR & BCP, backups, tabletop exercises, encryption at rest and in transit, networking, infrastructure, hosted environments such as Azure, AWS, or Google Cloud, Active Directory, enterprise platform integrations and AI technologies such as OpenAI, Microsoft Copilot, Claude, Gemini, and other enterprise AI platforms.
• Skill in: Information security, Governance, Risk & Compliance (GRC) platform administration, workflow automation, platform configuration, dashboard and reporting development, technical documentation, basic scripting or automation, working as a member of a team, communicating effectively, and establishing and maintaining effective working relationships.
• Ability to: Determine how enterprise platforms and workflows should operate and how changes in conditions, operations, and the environment affect business outcomes; troubleshoot platform issues; automate manual processes; work in a fast-paced environment; stay organized; prioritize workload; multi-task; and meet deadlines.
• The company has reviewed this job description to ensure that essential functions and basic duties have been included. It is intended to provide guidelines for job expectations and the employee's ability to perform the position described. It is not intended to be construed as an exhaustive list of all functions, responsibilities, skills and abilities. Additional functions and requirements may be assigned by supervisors as deemed appropriate. This document does not represent a contract of employment, and the company reserves the right to change this job description and/or assign tasks for the employee to perform, as the company may deem appropriate.
• NextGen Healthcare is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.