Candidhealth

Security GRC Lead

Who can apply: Only open to applicants in: New York.
Location as listed by the employer: “San Francisco; Denver; New York City”
Apply on Candidhealth's site ↗

Opens the employer's official application page.

Generate a CV for this job

A CV tailored to this job's requirements in one click — boosted with testimonials from people who know your work.

Generate my CV

About this role

Candidhealth is hiring for a Security GRC Lead role (full-time). See the official posting for full details.

Requirements

  • 3+ years in a technical security role, such as Security Engineering, Cloud Security, or Technical GRC.
  • Proficiency in Python, TypeScript, SQL and hands on experience interacting with APIs, parsing logs, and querying databases.
  • Hands-on experience with at least one primary cloud platform, GCP Preferred and Infrastructure-as-Code tools such as Terraform
  • Deep familiarity with core frameworks such as SOC 1/2, PCI, NIST, and/or HITRUST.
  • Understanding of CI/CD pipelines, Git workflows, and container environments (Docker/Kubernetes).
  • Certifications such as CISSP, CISA, CRISC, AWS Certified Security – Specialty, or CCSP.
  • Experience with Policy-as-Code engines
  • HITRUST experience

Summarized from the employer's posting — check the full posting for every requirement.