SOC2 Audit Specialist - (Heathcare/Pharma)

This position is for an Audit Specialist. The Audit Specialist is responsible for planning, coordinating, conducting, and remediation strategies of internal, external, and SOC2 audits related to contractual compliance, information security, data privacy, and continuous improvement at AssistRx. The Audit Specialist serves as a key liaison between internal departments and external clients to uphold quality, legal, compliance, and operational standards.

•  Negotiates audit calendar with internal and external stakeholders.
• Initiates and evaluates pre-audit planning for client audits including mock audits, audit training, and SME interviews. 
• Reviews documentation, training, contracts, vendor assessments, and other evidence prior to audits.
• Coordinates details of audit agenda and evidence requests with Operations, Account Management, Quality Assurance, Tech Org, and other applicable departments.
• Partners with key stakeholders to remediate audit findings, including tracking of audit CAPA plans and effectiveness checks.
• Prepares detailed audit reports with findings, risk impact, trends, and actionable recommendations for leadership
• Maintain and safeguard confidential, proprietary information, audit documentation and evidence in a secure and organized manner.
• Develop and maintain productive relationships with clients and staff through individual contacts and group meetings. 
• Assists with SOC2 audit readiness and mid-year check-ins.
• Evaluates the effectiveness of company controls and provides input into internal policies and procedures to strengthen the company’s control environment.
• Recommend improvements in audit procedures, checklists, workflows, and systems to enhance value and minimize risk.
• Conduct internal audits to verify compliance with contractual requirements including SLAs, security, privacy, data retention, and safety reporting requirements.
• Assist in the day-to-day operations of the Compliance Department including hotline responses, internal controls, safety reporting/Pharmacovigilance, document control, training, risk management, vendor risk analysis, business continuity, nonconformance, CAPA program, security questionnaires, and trend reporting.
• Stays informed of applicable regulation changes in the healthcare and pharmaceutical industries.
• Collaborates with various teams and staff across the organization.
• Maintains data in Compliance & Privacy logs.
• Receives, investigates, and resolves compliance and/or privacy related complaints or concerns.
• Tracks identified nonconformances through defined workflows.
• Maintains professional and technical knowledge by attending educational workshops, conferences, and certifications.
• Serves as a liaison, provides service information, answers questions, and supports team members and AssistRx colleagues.
• Apply compliance principles and best practices to a wide variety of scenarios.
• Demonstrates a thorough working understanding of compliance issues, their importance, and consequences.
• Excellent analytical, organizational, and written communication skills.
• Ability to handle confidential information and work independently.
• Must be a highly motivated, goal-oriented, proactive self-starter, and enthusiastic individual with a positive attitude. 
• Performs other related duties as assigned by management.

Requirements

• Bachelor’s degree in Information Systems, Health Information Management, Accounting, or a related field, three to five years of experience in audits, preferably within the healthcare or healthcare IT environment, or an equivalent combination of education plus experience.
• Detail-oriented with strong organizational skills and the ability to manage competing priorities. 
• In-depth knowledge of HIPAA/HITECH, auditing, and maintaining compliance.
• Familiarity with SOC 2, HITRUST, or ISO audit processes.
• Certified Professional in Project Management Professional (PMP), Certified Healthcare Compliance (CHC), Certified HIPAA Professional (CHP), Certified Information Systems Security Professional (CISSP), Information Systems Manager (CISM), Certified Information Systems Auditor (CISA), or other relevant certifications preferred.
• Proficient with GRC and audit management tools
• Computer skills: Microsoft Office suite, including Word, Excel, Outlook, PowerPoint, Visio. Experience with Jira Service Desk a plus.
• High degree of emotional intelligence.
• Excellent communication skills, both written and oral.
• Collaborate with colleagues as one team.
• Assumes positive intent in others.
• Make commitments and keeps commitments.
• Excellent analytical, reporting, and problem-solving abilities.