• Coordinating walkthrough meetings and evidence collection for external auditors for SOC 2, SOX, and HITRUST audits, through collaboration with control owners • Performing risk assessments and audits with limited supervision from management as well as assisting in the overall risk management program • Capturing and analyzing information to identify key risks and corresponding controls • Managing various control frameworks within OneTrust HITRUST readiness, including validation of control requirements against current policies, procedures and implementations • Management of our GRC tool, overseen by the Compliance Manager • Write policies and procedures for internal controls • Managing the update and review of policies and procedures that are required for our yearly audits through review of applicable laws and regulations and coordination with the larger group • Communicating findings and recommendations to management, and assisting in deficiency remediation as part of our annual audits • Deliver and management of security training, including phishing campaigns