Job Description

• Help to maintain Milestone's controls framework and ensure it is consistent with the business objectives, applicable legislation, and certifications
• Measure and analyze cyber security posture across the organization and recommend improvements and solutions to current cyber security issues and risks Support identifying the scope of the Governance processes, drafting and validating business cases, conducting business analysis, leading the gathering process of business requirements
• Participate in the assessment of current state and issue identification, develop recommendations aligned to strategic objectives, and draft high level conceptual and detailed design recommendations
• Support Milestone audits and security compliance reviews (including but not limited to: SSAE18/Soc2 Type2, ISO27000 etc.)Support company-wide annual Risk Assessments and Investigation Deep Dives
• Support execution of supplier and service partner Due Diligence and ad hoc audit requests
• Contribute to building and maintaining Wellpath audit, risk, and compliance maturity program
• Support rest of Milestone's business units in their ability to adopt innovative solutions and technology towards delivering a data secure environment both internally and externally
• Liaise with cross-functional teams to provide consulting as SME on governance and compliance requirements
• Develop, maintain, and regularly update the standards and policies framework, including coordinating signoffs from affected parties
• Produce management reports and support with presentations for Committee and Board meetings and Risk management reporting
• Support reporting to the internal Infosec organization, including weekly meeting minutes, ad-hoc meetings, and workshop minutes