Information Security Compliance Specialist (FISMA)

Company Description

Improving healthcare through innovative technology is at the core of Intelerad’s work. Our scalable medical imaging platform connects clinicians to a powerful imaging ecosystem that is fast, smart, and tapped into the data they need, no matter their location. We’re focused on delivering a best-in-class medical image management solution that improves provider efficiency, decreases the cost of healthcare, and improves the overall health of populations.  

Intelerad offers one of healthcare’s most comprehensive imaging and analytics platforms. Headquartered in Raleigh, NC and Montreal, Intelerad has nearly 700 employees located in offices across six countries. The company empowers nearly 2,000 healthcare organizations around the world with the speed, scalability, and simplicity needed to increase business performance while, most importantly, improving patient outcomes. Intelerad’s modern enterprise solutions have been acknowledged by a Best in KLAS recognition, ranking #1 for PACS Asia/Oceania in the 2021 Best in KLAS: Global Software (Non-US) report. To learn more, visit intelerad.com and follow Intelerad on LinkedIn and Twitter.

Job Description

Job Summary:
As Intelerad’s Federal Information Security Modernization Act (FISMA) Specialist, you will be a critical member of our Regulatory Compliance team. In this role, you will act as an internal consultant, owning all things FISMA. Through extensive planning, focused execution, and diligent follow through, this role will ensure compliance, successful audits (preparation, document creation and organization, etc.), and continually iterate on Intelerad’s processes and technology to improve our security. This role works closely with our Information Security team to create a lasting foundation for our rapidly growing organization.

The FISMA specialist will be responsible for identifying and implementing necessary process changes to maintain privacy and security certifications including FISMA, ISO 27001, SOC 2, and others. The FISMA specialist will assist in proactively identifying possible security and privacy concerns and inadequate systems that can negatively impact patients and customer satisfaction. The FISMA specialist is also responsible for leading improvement initiatives based on their findings. A successful candidate will be a self-starter, have strong attention to detail, excellent communication skills and a proven track record of managing cross-functional projects throughout all levels of the organization. A willingness to coach and train others to understand the “why” behind FISMA related initiatives will be critical to company wide adoption.

Duties/Responsibilities:
● Understand and remain current on applicable privacy and security requirements (i.e
FISMA, FedRamp, ISO 27001, SOC 2, HIPAA, GDPR, ISO 27001, etc.)

● Maintain company policies and procedures in compliance with FISMA and selected
laws/regulations and provide recommendations for improvement
● Develop and maintain strong working relationships with internal teams
● Raise security/privacy awareness throughout the organization
● Support the audit functions through the gathering and/or review of documentation for
submission to internal and/or external stakeholders, and coordination/completion of
Corrective and Preventive Actions
● Collaborate with internal teams to document trends and risks in order to develop,
implement, and lead initiatives that will improve Intelerad’s privacy and security
landscape
● Review audit reports, notice of findings and recommendations, and corrective action
plans (CAPAs) and provide guidance and recommendations; project manage CAPAs to
completion, leaning on internal shareholders and operational owners
● Ensure that documented processes are followed in a consistent, timely and efficient
manner
● Act as technical expert on information security control questions and questionnaires
● Coordinate process changes in response to new and/or updated security regulations

Qualifications

Qualifications:
● Strong technical aptitude and a quick learner with the ability to understand FISMA
related to medical devices and medical imaging
● Bachelor’s Degree and 3+ years experience with FISMA and/or FEDRAMP or similar
security regulations/standard
● Strong preference for medical device experience and experience with other security
regulations, including ISO 27001, SOC 2, and HIPAA
● Preference given to candidates with experience administering system security policies
for a large-scale organization with multiple product lines/ suites
● Ability to clearly communicate and define requirements
● Strong verbal and written communication skills in English
● Well-organized and project-oriented