Security Engineer - IT Control Engineer (Remote) - Inspira Financial

Take the next step in your journey at Inspira Financial. You will help businesses and individuals thrive today, tomorrow, and into retirement. Become part of a company that is people centric and client obsessed in every interaction; a community of forward-thinking individuals focused on driving results to deliver our mission with an unwavering commitment to integrity. Join us as we strengthen and simplify the health and wealth journey – relentlessly pursuing better outcomes for all. We believe in finding the best talent! While some roles are based at one of our office locations, remote roles can sit in any of the following states: AL, AZ, FL, GA, IA, IL, IN, MI, MN, MO, NC, NE, PA, SC, TN, TX, UT, VA and WV. Remote status and role locations are subject to change. Relocation is not provided.

Don’t meet every single requirement? Here at Inspira Financial, we believe there is no “perfect” candidate and want to encourage applying even if all the requirements listed aren’t met. Our goal is to build an authentic workplace by valuing diversity in our candidates. We work to ensure that our team reflects the diversity of the businesses and clients we serve. We are always looking to expand our growing team with dynamic and enthusiastic individuals. If you enjoy a collaborative, fun environment that champions career development, Inspira Financial is the place for you! We look forward to receiving your application! Check out this Inspira Financial video to learn more about our company!

HOW YOU WILL SOAR:

The Security Engineer I will report to the Security Engineering Manager in the Technology Department. This position helps reduce risk by proactively ensuring that the company is following current compliance and other standards-based requirements and is additionally prepared for emerging requirements. The IT Controls Engineer will fulfill these duties by collaborating with internal and external audit teams, IT management, corporate accountants, consultants, and other stakeholders to ensure project deliverables are met. Strong knowledge of governance frameworks, security best practices, and IT General Controls is essential for this position.

• Develop a strong knowledge and skillset across designated security functional areas including application security, technical project management, third party risk, policy governance, and awareness training

• Perform internal audits and develop testing methodologies of company controls, including but not limited to data center, critical application, and user account access

• Centralize and maintain evidence of security controls required for audits, including but not limited to HIPAA, PCI, and SOC II

• Assist in the evidence collection, maintaining knowledge base with common client facing responses inbound and outbound security and IT due diligence as part of a third party risk management program while prioritizing deliverables

• Manage critical vendor security and risk assessments including initiation and results evaluation.

• Identify and develop training related to controls governance or technical implementation of controls

• Maintain an understanding of the policies and procedures related to information security, ensuring compliance with relevant regulations and standards.

• Contribute to risk assessments on third-party vendors and implement assigned controls to mitigate identified risks.

• Understand and follow information security best practices, company policies, and information security standards that impact this role, including use of any tools, technologies, services, and processes

• Act as the technical liaison to company-wide functional areas to ensure adherence to compliance regulations and company standards

• Revise security policies and other documentation as determined by business needs and evolving security program requirements

• Other duties as assigned

IF YOU HAVE SOME OR ALL OF THE FOLLOWING, APPLY:

• Bachelor’s Degree in Business, IT, Cybersecurity or related field with focus on information systems preferred

• 1-3 years of applicable experience

• Technical Certifications a plus

• Experience in business continuity planning, disaster recovery

• Subject matter expert in regulatory environments, privacy, and cybersecurity policies

• Experience in policy, procedure/standards development creation and implementation of security/compliance

• Significant experience with crisis/emergency management, data classification, data breach and risk mitigation

• Understand data security standards and frameworks

• Understand PHI requirements and controls and how they pertain to HIPAA

• Intellectual curiosity to find new and unusual ways of how to solve cyber security issues

• Comprehend PCI regulations and ensure that all payment card processing meets PCI regulations

• Ability to approach cyber security challenges while keeping an eye on what is important

• Experience with regulatory and industry requirements such as PCI-DSS, FERPA, GLBA, HIPAA, DFARS, CMMC, etc

• Ability to create and maintaining respectful, strong working relationships with both IT and business units to integrate security principles with business operations

• Experience building and maintaining Standard Information Gathering (SIG) documentation

• Ability to prioritize, plan and take initiative and be highly self-motivated

• Strong communication and collaboration skills for working across departments to respond to client requests

• Familiar with SecureFrame or other similar security and compliance platform

• Familiar with responding to due diligence questionnaires and collecting supporting evidence

• Ability to work independently while attending to detail and raising issues proactively

Inspira Financial provides health, wealth, retirement, and benefits solutions that strengthen and simplify the health and wealth journey. With more than 7 million clients, representing over $62 billion in assets, Inspira works with thousands of employers, plan sponsors, recordkeepers, TPAs, and other institutional partners — helping the people they care about plan, save, and invest for a brighter future. Inspira relentlessly pursues better outcomes for all with our automatic rollover services, health savings accounts, emergency savings funds, custody services, and more. Learn more at inspirafinancial.com.

We have been recognized for our remarkable growth on lists such as Crain’s Fast 50 and Inc. 5000, and for our outstanding workplace culture and benefits with Built In’s 2023 Best Places to Work and Gallagher’s 2022 Best-In-Class Employer awards.