ZipRecruiter

Log In

1

Hitrust Security Assessor Jobs (NOW HIRING)

OneOncology

Security Analyst

Nashville, TN · On-site

Ensure compliance with HITRUST standards, HIPAA regulations, and other relevant healthcare securityrequirements. * Conduct ongoing risk assessments and security audits to maintain and demonstrate ...

OneStudyTeam

Director of Security

The scope includes third party risk, vendor assessment and qualification, security architecture ... HITRUST certification. * Experience with AI security risk management, data protection for AI use ...

OneStudyTeam

Director of Security

Boston, MA · Remote

The scope includes third party risk, vendor assessment and qualification, security architecture ... HITRUST certification. * Experience with AI security risk management, data protection for AI use ...

OneStudyTeam

Senior Security Compliance Analyst

$125K - $175K/yr

Conduct third-party vendor risk assessments, ensuring compliance with security policies and ... Experience leading ISO 27001, SOC2, or HITRUST audits, including ISMS implementation and external ...

Sightview Software LLC

Security Manager II - GRC

Tampa, FL · On-site

$145K - $160K/yr

Key Responsibilities: · Lead and mature the GRC program across security, privacy, and regulatory ... HITRUST CSF assessment cycles -- scoping, gap analysis, corrective action plans, and Validated ...

Tebra

Security Architect

$178K - $203K/yr

... risk assessments to identify control gaps and ensure technical alignment with SOC2, HITRUST, and ... Core Security Stack: Proven ability to manage and tune Cloudflare (WAF/Zero Trust) and CrowdStrike ...

next page

Showing results 1-20

People also search for

All JobsHitrust Security Assessor Jobs

Hitrust Security Assessor information

See salary details

$8

$58

$78

How much do hitrust security assessor jobs pay per hour?

As of Jun 6, 2026, the average hourly pay for hitrust security assessor in the United States is $58.77, according to ZipRecruiter salary data. Most workers in this role earn between $50.48 and $68.03 per hour, depending on experience, location, and employer.

What are HITRUST Security Assessors?

HITRUST Security Assessors are organizations or professionals authorized by HITRUST to perform validated assessments of an organization's compliance with the HITRUST CSF (Common Security Framework). They evaluate whether a company meets the security and privacy requirements necessary for HITRUST certification, which is especially important in industries like healthcare. Assessors must undergo rigorous training and meet strict qualifications to ensure they accurately and impartially assess an organization's information security controls.

What are some common challenges faced by HITRUST Security Assessors during the certification process?

HITRUST Security Assessors often encounter challenges such as aligning diverse client environments with HITRUST CSF requirements and managing varying levels of cybersecurity maturity. Thoroughly understanding client infrastructures and existing controls is essential for identifying gaps and recommending practical solutions. Collaboration with client stakeholders is frequent, requiring strong communication and project management skills to ensure timely evidence collection and clear remediation guidance. Additionally, keeping up with evolving frameworks and regulatory updates is vital for delivering accurate assessments.

What is the difference between Hitrust Security Assessor vs Hitrust Risk Analyst?

AspectHitrust Security AssessorHitrust Risk Analyst
CertificationsHITRUST CSF Practitioner, CISSP, CISAHITRUST CSF Practitioner, CISSP, CISA
Work EnvironmentConsulting firms, healthcare, and financial organizationsHealthcare, finance, and compliance teams within organizations
Primary FocusAssessing and validating security controls for HITRUST complianceAnalyzing and identifying security risks and vulnerabilities

Hitrust Security Assessors primarily evaluate organizations' security controls to ensure HITRUST compliance, while Hitrust Risk Analysts focus on identifying and analyzing security risks. Both roles require similar certifications and often work within healthcare and financial sectors, but their core responsibilities differ: assessment versus risk analysis.

What are the key skills and qualifications needed to thrive as a Hitrust Security Assessor, and why are they important?

A Hitrust Security Assessor requires a deep understanding of information security principles, risk management frameworks, and compliance standards, typically supported by relevant certifications such as HITRUST Certified CSF Practitioner (CCSFP) or similar credentials. Familiarity with HITRUST MyCSF, GRC (Governance, Risk, and Compliance) platforms, and audit management tools is essential. Outstanding analytical thinking, attention to detail, and effective communication skills set top assessors apart when interfacing with clients and interpreting complex security requirements. These skills ensure accurate assessments, comprehensive reporting, and help organizations achieve and maintain HITRUST certification for regulatory and business needs.
Infographic showing various Hitrust Security Assessor job openings in the United States as of May 2026, with employment types broken down into 98% Full Time, and 2% Contract. Highlights an 91% Physical, 2% Hybrid, and 7% Remote job distribution, with an average salary of $122,236 per year, or $58.8 per hour.
Chief Information Security Officer

Chief Information Security Officer

Healthcare Outcomes Performance Company (HOPCo)

Phoenix, AZ

Full-time

Posted 10 days ago

Job description

GENERAL STATEMENT OF DUTIES                                                                  

The Chief Information Security Officer (CISO) is the executive leader responsible for all cybersecurity and data protection needs across HOPCo. This leader is tasked with proactively ensuring all systems, networks, methods of storing and moving data, are secured in a manner that is robust and protects member personal health information and all other sensitive or business confidential information and assets. The CISO will protect HOPCo from “bad actors” seeking to undermine the HOPCo business or access protected data. This leader will stay aware of all new threats, to proactively monitor, detect, and mitigate.

This leader will work with HOPCo Compliance to ensure all HOPCo employees understand the role they play in protecting HOPCo assets and data. The CISO is responsible for all security standards, policies, and enforcement across HOPCo. This includes accountability for the security standards enforced with all third parties upon which HOPCo depends. This also includes the security profiles for all clinical sites owned or managed by HOPCo.

This leader plays a critical role in making certain HOPCo is prepared to continue to function in the event of a ransomware attack or natural disaster.

The CISO is also tasked with gaining and maintaining HiTrust certification for HOPCo and ensuring ongoing compliance with regulatory requirements like HIPAA and GDPR.

ESSENTIAL FUNCTIONS

  • Develop and execute on a plan to gain and maintain HiTrust certification
  • Own ongoing compliance with data protection regulations like HIPAA and GDPR
  • Stay aware and current on all government policies related to data protection
  • Stay aware of the developing cybersecurity threat landscape using regular NIST alerts (or equivalent) and filter noise from actual threats to the HOPCo ecosystem
  • Monitor the HOPCo systems for suspicious activity
  • Establish cybersecurity policies and protocols
  • Establish data privacy policies and protocols
  • Partner with Compliance to maintain and deliver regular cybersecurity and data privacy training to all employees
  • Enforce HOPCo cybersecurity and data privacy policies with all third parties
  • Initiate and sponsor regular cybersecurity audits, including penetration tests, to identify vulnerabilities
  • Assess all audit findings, establishing a prioritized path to mitigation
  • Report the state of cybersecurity threats and readiness to the CTO, CEO, and board on a regular basis
  • Establish dashboards and metrics to monitor current state and improvement over time
  • Select and implement appropriate monitoring tools
  • Develop an annual budget and business case tied to security investment needs
  • Establish a plan to protect HOPCo against ransomware attacks and to ensure the business can continue uninterrupted in the event of an attack
  • Work with other IT and business leaders to establish a robust Disaster Recovery Business Continuity Plan
  • Manage prioritization and execution priority on all cybersecurity and data privacy work
  • Manage MSSP vendors, including the selection and financial arrangement of using vendors
  • Work with the CTO to manage the security-related budget
  • Hire, manage, and coach security team members
  • Manage security assessments of HOPCo for customers and potential customer audits
  • Ensure HOPCo Access Management processes and policies are robust and followed

EDUCATION

  • Bachelor’s Degree required (Computer Science preferred); CISSP or equivalent security professional certification.

EXPERIENCE

  • 10+ years in various roles leading IT cybersecurity and data privacy teams and processes within healthcare
  • Exceptional written and verbal communication skills. Ability to communicate complex technical topics effectively to executive audiences.
  • Experience within a HiTrust certified organization and involvement in ongoing adherence
  • Experience implementing security programs within complex environments
  • Experience directly managing third parties to implement security tools and protocols
  • Demonstrated experience as successful influential leader across matrixed teams
  • Experience leading, hiring and coaching a team that includes internal and external team members

REQUIREMENTS

  • None

KNOWLEDGE

  • Expert knowledge and insight into threat vectors, ransomware risks, and data privacy regulations
  • Expert knowledge of available monitoring and threat-detection tools
  • Familiarity with IAM toolsets including Active Directory and Okta

SKILLS

  • Strong negotiation skills for keeping organizational focus on needed investments, while keeping the bigger HOPCo business picture in mind
  • Expert knowledge and insight into cybersecurity threat vectors and ransomware risks
  • Current and thorough knowledge regarding data privacy and protection regulations (HIPAA, GDPR, etc.)
  • Expertise in technical infrastructure, network architecture, and data movement
  • Expertise in data storage, cloud technologies, database configuration, data protection techniques
  • Expertise in system monitoring and threat detection toolsets and techniques
  • Excellent listening, analytical, and communication skills
  • Analytical thinking and problem-solving skills, with acute attention to detail, accuracy and accountability balanced with sound business judgment.
  • Exceptional interpersonal skills

ABILITIES

  • Ability to successfully manage multiple projects simultaneously
  • Ability to communicate complex information in a clear and concise manner to managers and executives
  • Ability to practice good judgment and discretion
  • Ability to act with integrity
  • Ability to engage and foster strong partnerships

ENVIRONMENTAL WORKING CONDITIONS

  • Normal office environment
  • Travel required

PHYSICAL/MENTAL DEMANDS

  • Requires sitting and standing associated with a normal office environment.
  • Manual dexterity using a calculator and computer keyboard.

ORGANIZATIONAL REQUIREMENTS

  • HOPCo Mission, Vision and Values must be read and signed.

This description is intended to provide only basic guidelines for meeting job requirements. Responsibilities, knowledge, skills, abilities and working conditions may change as needs evolve.

Apply