Engineering at Innovaccer
With every line of code, we accelerate our customers' success, turning complex challenges into innovative solutions. Collaboratively, we transform each data point we gather into valuable insights for our customers. Join us and be part of a team that's turning dreams of better healthcare into reality, one line of code at a time. Together, we’re shaping the future and making a meaningful impact on the world.
About the Role
We at Innovaccer are looking for a Security Engineer - II (GRC) who will be responsible for Governance, Risk & Compliance activities within our Cyber Security team across internal, customer, commercial and public-sector environments. This role will encompass Security Questionnaires, RFPs, Vendor Risk Management, Internal and External Audits, Security & Privacy Policies, Regulatory Compliance, Data Security, and Federal/State Compliance Programs. The role will provide exposure to multiple security domains and cloud platforms while supporting Innovaccer's growing healthcare, public-sector, and AI security programs
A Day in the Life
Responding to RFPs & Security Questionnaires.
Coordinating with RFP, Legal, Privacy, Product, Engineering, and IT teams on security questionnaires, security exhibits, BAA/MSA/DPA queries, and customer follow-ups
Experience performing Risk Assessments, Business Impact Analysis (BIA), Business Continuity/Disaster Recovery, and Tabletop Exercises
Analyzing and updating existing security, privacy, and compliance policies, procedures, and documentation
Supporting implementation of privacy, data protection, and security controls
Driving Vendor Risk Assessment & Third-Party Risk Management activities
Supporting internal and external audits including SOC 2 Type II, HIPAA, HITRUST, ISO 27001, and other applicable frameworks
Supporting FedRAMP, GovRAMP/StateRAMP, and public-sector compliance initiatives.
Supporting control implementation and assessment aligned with NIST SP 800-53.
Maintaining and tracking POA&M, remediation activities, risk registers, and control gaps.
Supporting Continuous Monitoring (ConMon) activities and audit/assessment evidence collection.
Coordinating with internal teams for gathering, validating, and presenting audit and compliance evidence.
Supporting third-party assessments and coordination with 3PAOs and external auditors
Identifying control gaps/weaknesses and formulating action plans to address them
Supporting security and privacy requirements across US healthcare, federal/state, and Middle-East regulations.
Supporting AI governance and security initiatives, including ISO 42001 and NIST AI RMF.
What You Need
Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field preferred
4-6 years of prior experience in Information Security Risk & Compliance / GRC
Hands-on experience with implementation or assessment of HIPAA, SOC 2 Type II, ISO 27001, HITRUST, or similar security and compliance frameworks
Strong understanding of security, privacy, risk, governance, and compliance controls
Experience with Vendor Risk Assessment / Third-Party Risk Management
Experience responding to RFPs, security questionnaires, customer assessments, and legal/security exhibits
Experience working with internal teams for audit, compliance, and evidence collection activities
Familiarity with US federal and state security and compliance frameworks, including FedRAMP, GovRAMP/StateRAMP, NIST SP 800-53, MARS-E, and ARC-AMPE
Understanding of POA&M, Continuous Monitoring (ConMon), security assessments, authorization processes, SSP, and 3PAO assessment activities
Familiarity with GDPR, HITECH, US state privacy/security regulations, and Middle-East privacy regulations including PDPL
Familiarity with cloud environments such as AWS, Azure, and/or GCP
Strong documentation, analytical, communication, and stakeholder-management skills
Able to work independently, multitask, prioritize, and manage time effectively
Collaborates effectively and…