Description

Job Purpose: The Cyber Compliance Specialist is responsible for reviewing Requests for Proposals (RFPs) and contracts to ensure compliance with cybersecurity requirements and standards. Lead and collaborate closely with cross-functional teams to assess the cybersecurity aspects of vendor proposals and contracts, ensuring alignment with Aventiv’s cybersecurity policies and regulations. Be the go-to cyber security RFP, customer regulatory auditor expert, navigating diverse security requirements and ensuring compliance across the products and services. THIS IS A 100% REMOTE POSITION. Eligible for Employee Referral Bonus*

Role and Responsibilities

• Responsibilities Essential Duties: Collaborate with SMEs/internal stakeholders to review RFPs cybersecurity requirements for compliance, support proposal knowledge management, edit RFP responses, and write supplementary proposal and contract documents. As well as updating and utilizing content from the proposal library. Conduct detailed analysis of cybersecurity provisions in RFPs and contracts, providing recommendations and guidance to internal teams for risk mitigation and negotiating contractual terms. Perform access entitlement review for systems, evaluating and validating user permissions. Interpret compliance contracts for management and staff, ensuring understanding of cybersecurity terms, conditions, and provisions. Drive control automation and process improvements in compliance, uses up to date knowledge to ensure compliance with evolving cybersecurity laws and best practices, and develops and maintain documentation for cybersecurity compliance assessments, findings, and recommendations. Monitor cyber key risk indicators (KRIs) to gauge vulnerabilities, control effectiveness, threat intelligence, and attack vectors, and provides status reporting using meaningful and actionable scorecards and relevant metrics and OKRs/KPIs Review cybersecurity controls for compliance with regulatory requirements, such as SOX, PCI-DSS, FISMA, FedRAMP, SOC 2, HIPAA, ISO 27001 etc. Perform other duties as assigned