Senior Governance Risk & Compliance Engineer
Arcadia is dedicated to happier, healthier days for all. We transform diverse data into a unified fabric for health. Our platform delivers actionable insights for our customers to advance care and research, drive strategic growth, and achieve financial success. For more information, visitarcadia.io.
Why This Role Is Important to Arcadia
As Arcadia???s Sr. Governance, Risk, & Compliance (GRC) Engineer, you will ensure Arcadia maintains robust governance, risk, and compliance processes while leveraging technology to drive efficiencies. This role is central to implementing and maximizing Vanta???s capabilities, automating compliance workflows, and ensuring audit readiness. You will collaborate with teams across Arcadia to align compliance efforts with technical security and data protection requirements.
The Sr. GRC Engineer will be a member of the Enterprise Information Security Assurance team. This role will partner with teams throughout Arcadia to ensure technical security and data protection requirements are aligned with compliance requirements and consistently implemented.You will also support our annual compliance (e.g., SOC 2, ISO 27001, HITRUST) and customer audits.
What Success Looks Like
In 3 months
- Gain deep familiarity with Vanta and Arcadia???s existing GRC processes
- Support SOC 2, ISO 27001, and HITRUST audits by managing evidence gathering and automating controls using Vanta
- Begin scripting automation workflows for control testing and evidence gathering using AWS, scripting tools, and Vanta
- Develop an understanding of the vulnerability detection and remediation tracking process
- Develop, manage, and maintain a registry of cyber security risks
- Manage the risk acceptances and exceptions process
In 6 months
- Implement Vanta???s advanced features to automate at least 60% of control testing and evidence gathering
- Own and streamline vulnerability remediation tracking and reporting workflows
- Collaborate with cross-functional teams to develop and enhance Arcadia???s GRC processes
- Own Arcadia's trust portal
In 12 months
- Maintain audit readiness for SOC 2, ISO 27001, and HITRUST
- Manage ongoing compliance reporting and risk assessments using Vanta
- Drive continuous improvements in compliance workflows and processes, ensuring scalability and efficiency
- Increase automateof the evidence-gathering and continuance control monitoring to at least 80% of the for key compliance frameworks
- Assist in the reduction of time-to-remediation for identified vulnerabilities by at least 20%
- Reviewing security documentation on an annual basis
- Assist in the management of audit processes
- Manages evidence gathering for audits and assessments
What You'll Be Doing
What You'll Bring
Would Love For You To Have
What You'll Get
Additional Information
About Arcadia
Arcadia.iohelps innovative providers and payers across the country transform healthcare to reduce cost while improving patient health.We do this by aggregating large amounts of disparate data, applying algorithms to identify opportunities to provide better patient care, and making those opportunities actionable by physicians at the point of care in near-real time.We are passionate about helping our customers drive meaningful outcomes. We are growing fast and have emerged as a market leader in the highly competitive population health management software market and have been recognized by industry analysts KLAS, IDC, Forrester, and Chilmark for our leadership. For a better sense of our brand and products, please explore ourwebsite.
Protect Yourself
If you have concerns about the authenticity of a job offer or recruitment-related communication claiming to be from Arcadia, we encourage you to verify by contacting us directly at (781) 202-3600 and select option 3. For more information, visit our website.
This position is responsible for following all Security policies and procedures in order to protect all PHI under Arcadia's custodianship as well as Arcadia Intellectual Properties. For any security-specific roles, the responsibilities would be further defined by the hiring manager.
apply to this job