Senior Security Risk Specialist, Global Benefits Risk & Compliance
Core
Senior subject matter expert leading third-party risk assessments, compliance strategies, and scalable risk management solutions for US employee health and financial benefit programs.
Role type
Senior IC security risk specialist (benefits compliance)
Builds
Third-party risk review programs, vendor security control designs, compliance frameworks, and risk mitigation strategies for benefits vendors.
Domain
US Employee Benefits, Information Security, Regulatory Compliance
Required skills
Third-party risk assessment, regulatory compliance analysis (HIPAA, ERISA, ACA, COBRA), vendor security strategy, risk quantification, stakeholder influence, process design, audit leadership, data analysis, remediation planning
Preferred skills
CISSP/CISA/CISM certification, advanced degree (MSHR/MBA/JD), deep knowledge of federal/state benefits regulations, proficiency in security frameworks (SOC, PCI, NIST, ISO), vendor contract negotiation
Technologies
HIPAA, ERISA, ACA, COBRA, SOC, PCI, NIST, ISO
Responsibilities
Lead complex third-party vendor risk assessments across benefits programs; define and iterate risk assessment methodologies and frameworks; drive benefits compliance management for third-party service delivery; own third-party risk review programs for vendor onboarding and transitions; develop mechanisms to inspect and monitor third-party risk delivery; advise managers and directors on third-party risk matters; mentor junior team members in risk assessment and compliance frameworks.
Seniority
Senior, hands-on IC with strategic influence
