Job details
Job type full-time
Full job description
See how you can make a difference! be part of an innovative company that cares about its associates and helps members enjoy the wonders of sight through healthy eyes and vision.
Versant health provides vision care to 37 million members nationwide! to ensure your continued success we provide opportunities for advancement and development.
Our associates remain engaged through a comprehensive compensation and benefits package which includes health and dental insurance, tuition reimbursements, 401(k) with company match, pet insurance and free vision insurance for you and your family
Scope and purpose of position
The security risk and compliance analyst is responsible for performing a variety of tasks related to assessing versant health internal compliance metrics, gathering evidence, tracking configuration changes, and responding to client audit requestsThis position will work closely with versant health risk assessment program and vulnerability analyst program.
Essential functions
Maintain sig and track security developments
Coordinate and track compliance client requests
Field, track and respond to it security compliance requests
Ensure it and information security compliance with policies & procedures by conducting internal audits and advising on areas of noncompliance
Assist and advise in the development of security policies and procedures
Develop, maintain and utilize compliance reporting and tracking tools and platforms
Assist in developing policies, procedures and processes based on audit findings and requirements.
Answer client audit requests with a high degree of accuracy based on historic information, update sig with new information.
Validate historic information and update as necessarySeek additional guidance where needed.
Create project status reports, including powerpoints and project plans where needed.
Represent versant health in client audits and provide high degree of client care and customer service.
Facilitate working groups and follow up on deliverables.
Meticulously input data into client audit systems when required.
Up to 10% travel
Education and experience
Bachelor`s degree in related field or equivalent combination of experience and education preferred
Two-four years of related experience in compliance, auditing, or security.
Knowledge and experience in the insurance, health, or vision care industry
Computer knowledge/skills needed
Advanced microsoft excel skills desirable
Understand audit language; be able to decipher requirements and develop procedures and controls; understand and advise on how best to implement controls
Expert technical writing skills: develop policies and procedures; translate audit requirements to plain english and vice-versa; extrapolate audit answers from technical data / answers provided by it staff
Highly detail-oriented: able to meticulously track and update spreadsheets, policy/procedure documents, and project timelines and schedules; track and submit completed deliverables.
Knowledge of grc tools and qmulos a plus
Project management skills: time tracking, budgeting, smartsheets – no pmp certification needed.
Database administration skills – any platform.
Essential responsibilities related to physical demands/work environment
The physical demands described here are representative of those that must be met by an associate to successfully perform the essential functions of this jobReasonable accommodations may be made to enable individuals with disabilities to perform essential functionsWhile performing the duties of this job, the associate is required to stand, use hands and fingers to handle, feel, pick or pinch, and talk or hear most of the timeThe associate is occasionally required to stand, walk, and reach with hands and armsThe associate must frequently lift and/or move up to 20 poundsThe noise level in this location is moderate (use of computers, printers and machines)Ability and willingness to travel as required.
Hipaa & security requirements
All associates must comply with the health insurance portability accountability act of 1996 (hipaa) as it pertains to disclosures of protected health information (phi) as described in the notice of privacy practices and hipaa privacy policies and proceduresAs a component of job roles and responsibilities, associates may have access to covered information, cardholder data or other confidential customer information which must be protected at all timesAs a result, associates must explicitly adhere to all data security guidelines established within the company’s privacy & security training program
We take pride in our recruiting process and follow a merit-based employee recruitment practice with extensive screening stepsWe will never request money from candidates who seek employment with us and will never ask for any payment as part of the recruitment process.
We provide equal employment opportunities (eeo) to all associates and applicants for employment without regard to race, color, religious beliefs, age, sex (including pregnancy), sexual orientation, gender identity or expression (including transgender status), national origin, ancestry, status as a protected veteran or disabled veteran, physical or mental disability or history of disability, genetic information, marital status, or any and all other categories protected by under applicable federal, state or local law.
This policy extends to all associates and to all aspects of the employment relationshipAny associate who violates this policy will be subject to disciplinary action up to and including termination
