HITRUST Junior Consultant

Description

POSITION SUMMARY

The Consultant is responsible for supporting the Consulting Services Team in delivering cybersecurity, privacy or compliance services, solutions, and tools to clients. This role requires proactive initiative to study, ask questions, and rapidly learn the organization's solutions, methodologies, contract structures, and delivery standards.

Consultants focus on executing client deliverables, enhancing service quality, and improving project efficiency under the guidance of senior team members. They must develop subject matter expertise and become trusted advisors within their assigned area while contributing to process improvements and best practices.

SPECIFIC JOB RESPONSIBILITIES

· Support the execution of cybersecurity and compliance consulting engagements under senior leadership guidance.

· Work closely with clients to collect data, conduct assessments, and document findings.

· Assist in drafting reports, analyzing security gaps, and proposing actionable recommendations.

· Ensure all work aligns with regulatory frameworks such as HIPAA, NIST, HITRUST, and other applicable standards.

· Provide strategic and tactical recommendations to clients to enhance their privacy and security programs.

· Participate in interim security and privacy officer engagements as assigned.

· Manage assigned tasks and project components effectively within defined timelines.

· Provide timely updates to senior consultants and managers to ensure smooth project execution.

· Support quality control by reviewing data inputs and deliverables to maintain accuracy and compliance.

· Collaborate with cross-functional teams to ensure seamless service delivery.

· Act as a trusted point of contact for operational client inquiries.

· Communicate effectively with clients to clarify expectations and collect required data.

· Address immediate client concerns and escalate complex issues to senior team members.

· Build and maintain relationships with key client stakeholders.

· Assist in the refinement of methodologies, tools, and templates to improve efficiency.

· Contribute to internal initiatives aimed at process improvement and service innovation.

· Participate in knowledge-sharing sessions and internal training programs.

· Meet all internal compliance requirements and follow all internal processes.

· Successful delivery of high-quality engagements within scope, timeline, and budget.

· Achievement of utilization targets and client satisfaction scores.

· Contributions to thought leadership through blogs, presentations, and webinars.

· Participation in internal and external educational events to promote organizational expertise.

· Adherence to company policies, procedures, and security requirements.

· Billable hours target: 1,664 hours annually (equivalent to 80% utilization)

· Perform other duties within the scope of the role as assigned.

· Expectation to work sufficient US Hours to meet client needs.

Requirements

EXPERIENCE REQUIRED

· 1-3 years of Consulting, Cybersecurity, or related experience

QUALIFICATIONS, SKILLS, & KNOWLEDGE

· BA/BS degree, field preferred

· Strong knowledge of cybersecurity frameworks, including NIST and HIPAA regulations.

· Ability to critically analyze data, findings, and risk assessments to support client objectives.

· Familiarity with project management principles and consulting best practices.

· Ability to embrace Clearwater’s CLEAR core values (Commitment to Client Success, Lead with Accountability, Integrity & Collaboration, Excellence in All That We Do, Advance Colleague Success, Respect & Transparency) and culture.

PROFESSIONAL DEVELOPMENT EXPECTATIONS

· Pursue and maintain industry-recognized certifications such as ISC2 Associate, Certified Ethical Hacker, or equivalent.

· Stay up-to-date with HIPAA regulations, OCR audit protocols, and cybersecurity frameworks like HITRUST.

· Contribute to the development of tools, templates, and training resources for continuous improvement.

· Participate in internal training programs to advance consulting and technical skills.

AUDIT SPECIFIC REQUIREMENTS

AUDIT SPECIFIC QUALIFICATIONS, SKILLS, & KNOWLEDGE

· HITRUST Roles:

o Required certifications: CCSFP

o Additional certifications desired: CHQP, CISSP, CISM, CISA, Certified ISO 27001 – Lead Implementer, Lead Auditor, Internal Auditor; RISS-METI, GSNA, IRCS ISMS Auditor or higher; CIA