Job Description

Description:

Clearwater Security and Compliance LLC is the healthcare industry’s leading cybersecurity and HIPAA compliance solutions provider. As a result of two acquisitions in 2022, the company is the largest, pure-play healthcare cybersecurity, cyber risk management and HIPAA Compliance provider. It helps healthcare organizations meet compliance requirements and protect patient data through its cyber risk management software as a service (SaaS) and its broad range of differentiated cybersecurity and compliance consulting services. The company is backed by a healthcare focused private equity fund with $5B under management.

The Cybersecurity & Cyber Risk Principal Consultant leads and executes Clearwater consulting engagements and managed services and plays a key role in contributing to the Company’s rapid growth. The Principal Consultant engages in thought leadership, new solution development and continuously builds his/her expertise in relevant domains to Clearwater’s solutions. The Principal Consultant develops his/her mastery of healthcare cybersecurity, cyber risk management, and compliance while exploring emerging healthcare industry issues, technologies, and opportunities.

The Principal Consultant spends the majority of their time working directly with Customers. The role leverages their experience to drive customer success and to identify additional ways that Clearwater can provide value. The Principal Consultant travels to Customer locations as needed, with an expectation of 50% - 60% once business travel fully returns post-COVID.

The Principal Consultant is a key advisor and expert to Clearwater customers and represents the high standards of quality and excellence for which Clearwater is known. Through the delivery of robust and proactive cybersecurity, risk analysis, and risk response solutions, the Principal Consultant enables Customers to improve patient safety, safeguard sensitive health information, and protect their corporate capital and reputation.

SPECIFIC JOB RESPONSIBILITIES

Complete consulting services engagements as assigned, following Statements of Work, Clearwater standards, relevant Customer policies, Clearwater defined work processes, templates, and IRM|Pro® software. These include but are not limited to policy and procedure customization, risk analysis, risk response, security assessments, vendor risk management, development of strategic and tactical work plans, remediation planning and execution, general advisory, and other services
Achieve utilization targets, complete projects on time and budget, and meet quality standards.
Provide virtual CISO services for Customers, and lead Clearwater ClearAdvantage managed services engagements.
Coach Consultants and provide training for newer members of the consulting team.
Study, learn, test, document, execute and seek to continuously improve scalable consulting services processes to effectively deliver Customer engagements while achieving a high level of customer satisfaction
Develop, document, test, and continually improve training programs and materials to support and encourage Customer adoption and retention of Clearwater’s IRM|Pro® software.
Execute project planning, scheduling, and other coordination of internal and Customer resources to conduct interviews, meetings, and presentations.
Prepare and deliver thoughtful, insightful, and professional presentations to Customers and internal Clearwater stakeholders.
Create, review and edit findings, observations, and recommendations reports.
Develop and continuously improve tools and templates used in delivering Customer engagements and training subcontracted resources.
Conduct IRM|Pro® training and orientation sessions with Customers.
Actively participate in the development of strategies and execution of tactics supporting business development activities.
Provide pre-sales support to Sales in assessing Customer needs, scoping engagements, and estimating the level of effort for consulting projects or managed services engagements.
Assist Product Innovation, Customer Success, Sales, Marketing, and other departments with projects as requested.
Develop and deliver thought leadership, including creating and providing webinars, writing blog posts, and participating in industry events.
Contribute to the development and delivery of new services to support business growth, creating and refining processes, and providing content to sales and marketing to commercialize solutions.
Identify, document, and pursue opportunities for follow-on engagements or additional services with Customers, working closely with Sales and Customer Success teams.
Become knowledgeable of Clearwater’s solution and service offerings, sales process, marketing materials, contract and SOW structure, methodologies, delivery standards, work tools, and processes.
Pursue additional education and stay current on best practices, technical skills, and tools related to the position's duties.
This position has significant interaction with internal and external stakeholders, including colleagues, customers, partners, subcontractors, and potential investors. This position requires a strong Customer service orientation and the ability to:
work independently on a variety of projects simultaneously,
exercise good judgment and initiative to manage priorities,
quickly develop trusting relationships with a variety of healthcare compliance and information system professionals,
read and readily comprehend Federal and State security and privacy regulations, security and privacy policies and procedures, and assess their relevance to specific situations.
pose questions and listen to Customer responses effectively to draw out essential facts, data, business process descriptions, sensitivities, and perspectives, and
strong organizational abilities, effective writing skills, and communications skills.

Requirements:

The Principal Consultant will have experience in cybersecurity, information risk management, or both domains, preferably with direct experience working in the healthcare industry or industries using the same standards and processes that Clearwater uses to perform its engagements. The Principal Consultant must have prior experience in consulting, managing teams, or having cybersecurity or privacy leadership role in a healthcare organization.

In addition to technical cybersecurity experience and skills, the Principal Consultant must have demonstrated through experience that she/he has the required soft skills required to drive engagement with Customers. She/he must have experience successfully managing projects, meeting deadlines, and achieving high levels of quality based on standards. The Principal Consultant must have experience working on and leading teams, analyzing data, writing professional technical reports, and developing and delivering presentations to stakeholders at various levels of the organization.

QUALIFICATIONS, SKILLS, & KNOWLEDGE

Relevant experience performing NIST-based Information Systems risk analyses and HIPAA Privacy, Security, and Breach Notification Rule compliance evaluations.
Self-starters who can work independently, seek out and leverage internal resources when needed, proactively take ownership of their work and career, and drive engagements to provide the value our Customers expect.
Relevant experience and prior demonstrable success leading and delivering consulting engagements in the IS or healthcare space.
Relevant technical training, project management training, and certifications such as CISSP, CRISC, CISA, CISM, HCISPP, CIPP, CHPS, etc.
Ability to travel to deliver Customer engagements 50 – 60% of the time.
Excellent analytic and problem-solving skills, especially in the information systems, security, and privacy space
Highly effective verbal communications and presentation skills in a Customer setting
Excellent technical written communication skills, in particular, regarding information system, security and privacy subject matter, policies and procedures
Experience with creating and executing repeatable work processes and procedures.
Experience with providing technical/product support services within a sales process.
Prior experience and proven success planning, developing materials, and delivering training on technical subject matter and software products.
The initiative and ability to master HIPAA regulations, enforcement, and OCR audit subject matter, as well as the NIST Information Risk Management framework and processes.
Ability to learn new subject matter and context quickly and to maintain market and subject matter awareness.
Ability to understand SOWs, customer proposals, project notes, deliverables, and final reports; assimilate previous experience, relevant subject matter, data, facts, and results; and develop relevant questions of colleagues to hasten understanding scenarios, methodologies, processes, and “lessons learned.”
This position has significant interaction with internal and external stakeholders, including colleagues, customers, partners, subcontractors, and potential investors. This position requires a strong Customer service orientation and the ability to:
work independently on a variety of projects simultaneously,
exercise good judgment and initiative to manage priorities,
quickly develop trusting relationships with a variety of healthcare compliance and information system professionals,
read and readily comprehend Federal and State security and privacy regulations, security and privacy policies and procedures, and assess their relevance to specific situations.
pose questions and listen to Customer responses effectively to draw out essential facts, data, business process descriptions, sensitivities, and perspectives, and
strong organizational abilities, effective written and verbal communications skills.

WORK ENVIRONMENT

Currently, Clearwater is an entirely “virtual” company, and all colleagues work remotely.
Work remotely and provide own printer/scanner, computer audio capability, cell phone, Internet service, and Microsoft Office software.
Company provides subscriptions to Salesforce.com, Basecamp, Microsoft On-Line Services, Encryption tools, Data backup, Zoom Meeting, and other tools selected as standard by the Company.
Travel is required an estimated 50 – 60% of the time.

COMPENSATION & BENEFITS