Security Customer Assurance Specialist

Datavant is a data platform company and the world’s leader in health data exchange. Our vision is that every healthcare decision is powered by the right data, at the right time, in the right format.

Our platform is powered by the largest, most diverse health data network in the U.S., enabling data to be secure, accessible and usable to inform better health decisions. Datavant is trusted by the world’s leading life sciences companies, government agencies, and those who deliver and pay for care.

By joining Datavant today, you’re stepping onto a high-performing, values-driven team. Together, we’re rising to the challenge of tackling some of healthcare’s most complex problems with technology-forward solutions. Datavanters bring a diversity of professional, educational and life experiences to realize our bold vision for healthcare.

As a lead within the larger Information Security Governance, Risk, and Compliance (GRC) organization, you will join our Customer Security Assurance program. In this role you will be the voice of security with our customers and be responsible for building the long term plan that builds the trust needed to accomplish Datavant’s vision of connecting the world's healthcare data. If you appreciate that security is not just a cost-center, but a competitive advantage, this role will enable you to lead us building trust and growing our business by leveraging our strong security program. We will be the best in industry at security, and you will help us bring this to life!

You will:

• Coordinate and manage responses to customer enquiries, including contributing to Request for Proposals (RFP), responding to customer security enquiries, diligence assessments, customer audits, etc.

• Perform technical assessments and documentation around key controls and security processes, including working knowledge of key controls across a number of industry best practices

• Liaise with customers, articulating control implementation, and describing considerations for applying security and compliance concepts to a technical environment. Simplify security compliance requirements into clear technical control specifications and policies.

• Field and address requests for team support in collaboration with internal and external stakeholders.

• Communicate effectively and regularly with internal teams and customers

• Continuously build and refine knowledge base information, whitepapers, frequently asked questions, control narratives, etc. and contribute to ongoing development and improvement.

• Understand the impact of security in our go-to-market pipeline, report on trends and help us improve how we invest in security.

• Stay apprised on industry standards and regulations for security and compliance

What you will bring to the table:

• 4+ years experience in security, audits, customer assurance, control assessments, or risk assessments based on security and privacy frameworks, such as SOC 2, ISO 27001, HIPAA, PCI, HITRUST, NIST 800-53, FedRAMP, etc.

• Experience in performing technical assessments and documentation around key controls and security processes, as well as auditing IT processes, including working knowledge of key controls across a number of industry best practices

• Excellent analytical, problem-solving, and project management skills

• Strong communication and interpersonal skills, with the ability to work effectively with cross-functional teams, stakeholders, and customers

• Detail-oriented and able to handle multiple priorities in a fast-paced environment

• Ability to operate effectively in ambiguity

Bonus points if:

• One or more industry-recognized security, cloud, or audit professional certifications (e.g., CISA, CISM, CISSP, CCSP, etc.)

• IT security and audit experience in the healthcare industry

• Knowledge of, or experience working with, cloud-services environment (e.g. AWS) and cloud security controls

• Experience with Security Platforms or Portals (e.g. TrustCloud) a plus.

To ensure the safety of patients and staff, many of our clients require post-offer health screenings and proof and/or completion of various vaccinations such as the flu shot, Tdap, COVID-19, etc. Any requests to be exempted from these requirements will be reviewed by Datavant Human Resources and determined on a case-by-case basis. Depending on the state in which you will be working, exemptions may be available on the basis of disability, medical contraindications to the vaccine or any of its components, pregnancy or pregnancy-related medical conditions, and/or religion.

This job is not eligible for employment sponsorship.

Datavant is committed to a work environment free from job discrimination. We are proud to be an Equal Employment Opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other legally protected status. To learn more about our commitment, please review our EEO Commitment Statement here. Know Your Rights, explore the resources available through the EEOC for more information regarding your legal rights and protections. In addition, Datavant does not and will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay.

At the end of this application, you will find a set of voluntary demographic questions. If you choose to respond, your answers will be anonymous and will help us identify areas for improvement in our recruitment process. (We can only see aggregate responses, not individual ones. In fact, we aren’t even able to see whether you’ve responded.) Responding is entirely optional and will not affect your application or hiring process in any way.

Datavant is committed to working with and providing reasonable accommodations to individuals with physical and mental disabilities. If you need an accommodation while seeking employment, please request it here, by selecting the ‘Interview Accommodation Request’ category. You will need your requisition ID when submitting your request, you can find instructions for locating it here. Requests for reasonable accommodations will be reviewed on a case-by-case basis.

For more information about how we collect and use your data, please review our Privacy Policy.