Staff Security Engineer, GRC
Oscar Health
Location: New York, New York, United States, United States
**Staff Security Engineer, GRC at Oscar Health in New York, New York, United States** **What you'll do** - Lead governance and compliance strategy for CMS Enhanced Direct Enrollment platforms - Map CMS EDE and NIST requirements to technical, operational, and administrative controls - Prepare, review, and submit CMS significant change requests and maintain evidence of approval status - Build compliance-as-code patterns for AWS and manage POA&M lifecycle **What they're looking for** - Experience with CMS EDE platforms and FedRAMP Moderate-aligned expectations - Knowledge of NIST SP 800-53 controls and compliance-as-code patterns - Ability to partner with engineering, security, legal, compliance, and product teams - Experience with AWS-hosted systems and significant change management **Details** - Location: New York, New York, United States (Hybrid) - Type: Not specified - Salary: Not specified
Similar jobs in New York, New York, United States
- Associate, Process Optimization — Oscar Health (New York, New York, United States, United States)
- Associate, Lucie Training & Sales Enablement — Oscar Health (New York, New York, United States, United States)
- Associate, Strategic Finance (FP&A) — Oscar Health (New York, New York, United States, United States)
- Clinical Programs Business Development Manager — Judi Health (New York, New York, United States, United States)
- Senior Analyst, Risk Management, PG — Judi Health (New York, New York, United States, United States)
- Analyst, Client Experience & Optimization — Judi Health (New York, New York, United States, United States)
- Senior Analyst, Risk Management, Audit — Judi Health (New York, New York, United States, United States)
- Sales Enablement Associate, ICHRA — Oscar Health (New York, New York, United States, United States)