Compliance Specialist – FedRAMP & HITRUST

{
  "content_hash": "de42bf708a04f302328b91e0ee47c71d33552021923df979055403c4fdf74d27",
  "source_hash": "582b7f9fc00d1176411954e369ad17d94a0f2b76fb2b751511ed106bead91c19",
  "last_changed_at": "2026-06-16T10:14:53.167Z",
  "active_status": "active"
}

{
  "language": "en",
  "location": {
    "raw": "Oak Brook, Illinois, United States",
    "city": "Oak Brook",
    "region": "IL",
    "country": "United States",
    "is_remote": false,
    "confidence": 0.8
  },
  "salary_max": null,
  "salary_min": null,
  "inferred_at": "2026-06-18T08:48:53.022Z",
  "launch_scope": {
    "reason": "bamboohr_production_catalog",
    "included": true,
    "location": {
      "raw": "Oak Brook, Illinois, United States",
      "city": "Oak Brook",
      "region": "IL",
      "country": "United States",
      "is_remote": false,
      "confidence": 0.8
    },
    "countries": [
      "United States"
    ]
  },
  "remote_policy": null,
  "salary_period": null,
  "workplace_type": null,
  "salary_currency": null
}

{}

{
  "list_job": {
    "id": "152",
    "isRemote": null,
    "location": {
      "city": null,
      "state": null
    },
    "atsLocation": {
      "city": "Oak Brook",
      "state": "Illinois",
      "country": "United States",
      "province": null
    },
    "departmentId": "18654",
    "locationType": "1",
    "jobOpeningName": "Compliance Specialist – FedRAMP & HITRUST",
    "departmentLabel": "Compliance",
    "employmentStatusLabel": "Full-Time"
  },
  "detail_errors": [],
  "detail_job_opening": {
    "location": {
      "city": null,
      "state": null,
      "postalCode": null,
      "addressCountry": null
    },
    "datePosted": "2026-06-15",
    "atsLocation": {
      "city": "Oak Brook",
      "state": "Illinois",
      "country": "United States",
      "countryId": "1"
    },
    "description": "<p>Jorie AI is transforming healthcare operations through intelligent automation, secure cloud solutions, and data-driven insights. As a Compliance Specialist – FedRAMP, you will play a key role in ensuring Jorie’s cloud infrastructure and services meet stringent federal security and compliance standards while maintaining alignment with existing HITRUST and HIPAA<br>frameworks.</p>\n<p>This position requires deep understanding of FedRAMP authorization processes, cloud security compliance, and the integration of HITRUST controls across multi-framework compliance programs. The ideal candidate is proactive, detail-oriented, and comfortable working cross-functionally with IT, security, and audit teams in a fast-paced technology environment.</p>\n<p><br></p>\n<p><span style=\"font-weight: bold\">Key Responsibilities</span></p>\n<p><span style=\"font-weight: bold\">FedRAMP Compliance Oversight</span></p>\n<ul>\n<li>Support the implementation and maintenance of Jorie’s FedRAMP authorization program in alignment with agency and customer requirements.</li>\n<li>Develop and maintain FedRAMP System Security Plans (SSP), POA&amp;Ms, and supporting documentation.</li>\n<li>Coordinate with internal IT and cloud engineering teams to ensure continuous compliance of systems within AWS, Azure, or other CSP environments.</li>\n<li>Liaise with 3PAOs (Third-Party Assessment Organizations<span style=\"font-weight: bold\">)</span> and government stakeholders during audits and assessments.</li>\n</ul>\n<p><span style=\"font-weight: bold\">HITRUST and Multi-Framework Alignment</span></p>\n<ul>\n<li>Ensure consistent control alignment between FedRAMP Moderate/High baselines, HITRUST CSF, and NIST 800-53 frameworks.</li>\n<li>Maintain evidence documentation, control mapping, and compliance matrices for overlapping regulatory programs (HITRUST, SOC 2, HIPAA, PCI).</li>\n<li>Participate in ongoing HITRUST recertification processes, including control review, evidence validation, and policy updates.</li>\n<li>Collaborate with internal and external auditors (e.g., ISP) to ensure accurate reporting and compliance posture visibility.</li>\n</ul>\n<p><span style=\"font-weight: bold\">Risk Management &amp; Continuous Monitoring</span></p>\n<ul>\n<li>Assist in continuous monitoring of security controls and remediation of POA&amp;M items.</li>\n<li>Conduct risk assessments for cloud systems, vendors, and new integrations impacting the FedRAMP boundary.</li>\n<li>Coordinate vulnerability scans, incident response activities, and configuration management documentation in alignment with FedRAMP and HITRUST requirements.</li>\n</ul>\n<p><span style=\"font-weight: bold\">Policy, Documentation, and Training</span></p>\n<ul>\n<li>Develop, update, and enforce policies related to data security, cloud compliance, and regulatory reporting.</li>\n<li>Provide compliance guidance and training to engineering, DevOps, and IT personnel involved in the FedRAMP environment.</li>\n<li>Support internal readiness reviews, gap assessments, and compliance roadmap initiatives.</li>\n</ul>\n<p><br></p>\n<p><span style=\"font-weight: bold\">Qualifications</span></p>\n<p><span style=\"font-weight: bold\">Education</span></p>\n<ul>\n<li>Bachelor’s degree in <span style=\"font-weight: bold\">Information Security, Computer Science, Compliance, or related field</span> required.</li>\n</ul>\n<p><span style=\"font-weight: bold\">Experience</span></p>\n<ul>\n<li>3–6 years of experience in compliance, information security, or risk management.</li>\n<li>At least 2 years of direct experience supporting FedRAMP programs or equivalent government compliance frameworks.</li>\n<li>Hands-on experience with HITRUST CSF certification processes, evidence collection, and auditor coordination.</li>\n<li>Experience working in cloud-based environments (AWS, Azure, or GCP) and familiarity with continuous monitoring tools (Splunk, Qualys, Nessus, etc.).</li>\n<li>Background in healthcare, AI, or SaaS industries strongly preferred.</li>\n</ul>\n<p> </p>\n<p><br><br></p>\n<p><span style=\"font-weight: bold\">Skills &amp; Competencies</span></p>\n<ul>\n<li>In-depth understanding of NIST 800-53, FedRAMP Moderate/High baselines, and HITRUST CSF control mapping.</li>\n<li>Strong knowledge of HIPAA, HITRUST, SOC 2, and ISO 27001 standards.</li>\n<li>Excellent documentation and writing skills — ability to produce and maintain formal compliance deliverables.</li>\n<li>Strong analytical, organizational, and communication skills, with the ability to work across technical and non-technical teams.</li>\n<li>FedRAMP (3PAO) Assessor or equivalent experience</li>\n</ul>\n<p> </p>\n<p><span style=\"font-weight: bold\">Preferred Certifications</span></p>\n<ul>\n<li>HITRUST Certified CSF Practitioner (CCSFP) – <em>required </em></li>\n<li>Certified Information Systems Auditor (CISA) or Certified in Risk and Information Systems Control (CRISC) – <em>preferred</em></li>\n<li>Certified Information Systems Security Professional (CISSP) – <em>a plus</em></li>\n<li>Security+ or CCSP (Certified Cloud Security Professional)</li>\n</ul>",
    "compensation": "$120,000-$150,000",
    "departmentId": "18654",
    "locationType": "1",
    "seekPromoted": false,
    "jobCategoryId": null,
    "jobOpeningName": "Compliance Specialist – FedRAMP & HITRUST",
    "departmentLabel": "Compliance",
    "jobOpeningStatus": "Open",
    "minimumExperience": "Mid-level",
    "jobOpeningShareUrl": "https://jorieai.bamboohr.com/careers/152",
    "employmentStatusLabel": "Full-Time"
  }
}