Senior HITRUST Assessor (CCSFP)- US Remote

Insight Assurance is a global audit firm on a mission to transform how organizations achieve cybersecurity and compliance. Founded by former Big 4 (EY) professionals, we deliver next-generation audit services across SOC 2, ISO 27001, PCI DSS (QSA), HITRUST, CMMC (C3PAO), and FedRAMP (3PAO) frameworks. 
 
We’re not your traditional audit firm — we’re tech-enabled, leveraging compliance automation and advanced collaboration tools to make audits faster, smarter, and more impactful for our clients. 
 
Recognized on the Inc. 5000 and Fast 50 lists, Insight Assurance is one of the fastest-growing global audit firms, with 170+ professionals supporting nearly 2,000 clients across the Americas, EMEA, and APAC.

Position Summary

The HITRUST Senior Assessor is responsible for supporting and executing HITRUST readiness and validated assessment engagements for clients, with a focus on healthcare and other highly regulated industries. This role is primarily hands-on, contributing to assessment activities, ensuring high-quality deliverables, and following a consistent, standards-driven approach aligned with the HITRUST CSF and related frameworks.

TRAINING AND CERTIFICATIONS

Required

• One or more relevant information security/audit certifications such as CISA, CISSP, CISM, CRISC, or similar.
• Active Certified HITRUST CSF Practitioner (CCSFP) certification (or ability to obtain within three months after hire).
• Demonstrated formal training in HITRUST assessment methodology and MyCSF usage.

EXPERIENCE

• Minimum three to five years of direct, hands-on experience performing HITRUST validated assessments, ideally within a public accounting, consulting, or specialized cybersecurity firm.
• Experience supporting engagement, delivery, and working within project teams.
• Demonstrated experience working with U.S.-based and international team members and clients.
• Prior experience with SOC 2, ISO 27001, or other assurance/compliance engagements is strongly preferred.
  
  

DUTIES AND RESPONSIBILITIES

Engagement Delivery & Client Support

• Support multiple concurrent HITRUST readiness and validated assessment engagements from planning through reporting.
• Assist in developing and executing assessment plans, including scope, objectives, and timelines.
• Perform comprehensive risk and gap assessments against the HITRUST CSF, including control design and operating effectiveness testing.
• Review client policies, procedures, technical configurations, and evidence to evaluate conformance with HITRUST CSF, HIPAA, and related regulatory expectations.
• Document findings and contribute to remediation recommendations and roadmaps to support clients’ certification or recertification efforts.

Team Collaboration

• Collaborate with engagement leads and team members to deliver high-quality work products.
• Assist in preparing workpapers, test results, and reports in alignment with firm methodology and HITRUST requirements.
• Provide support and guidance to junior team members as needed.
• Contribute to a collaborative culture that emphasizes quality, client service, and continuous improvement.

Methodology, Quality, and Process Support

• Follow the firm’s HITRUST methodology, templates, and work programs in alignment with the HITRUST Assessment Handbook and Risk Management Handbook.
• Stay current on HITRUST CSF updates, emerging guidance, and related frameworks (e.g., NIST, ISO 27001, SOC 2, HIPAA).
• Support internal quality assurance activities and remediation