American Medical Compliance -
-
TYPE OF WORK
Full Time
-
-
SALARY
TBD
-
-
HOURS PER WEEK
40
-
-
DATE UPDATED
Apr 10, 2026
Role Overview
American Medical Compliance is seeking a highly detail-oriented Security Operations Specialist to support our cybersecurity and regulatory compliance initiatives. In this role, you will act as the primary executor of our security and compliance controls, working directly with the CISO in a Maker-Checker framework. You will be responsible for performing critical administrative tasks, maintaining security systems, and generating audit-ready evidence to support our SOC 2 Type II, ISO 27001, and HIPAA compliance.
Job Details:
Schedule: Mondays to Fridays; 8 AM to 4 PM Mountain Standard Time
Work type: Full-time; Work from Home set-up
Start Date: ASAP
Key Responsibilities (Maker Functions)
• Compliance Evidence Generation
Execute and document technical controls required for SOC 2 Type II, ISO 27001, and HIPAA, including:
o Access log reviews
o Encryption verification
o Audit trail validation
• Jira Administration
Serve as the primary administrator for Jira:
o Design and maintain workflows
o Configure permission schemes
o Manage service desk projects
o Ensure all IT and compliance activities are properly tracked and auditable
• User Lifecycle Management
Manage provisioning and de-provisioning of user access across systems:
o Enforce the Principle of Least Privilege
o Ensure compliance with HIPAA access control standards
• Infrastructure Administration
Support cloud and on-prem environments by:
o Performing credential rotations
o Applying security patches
o Monitoring system health and availability
• Security Documentation & Audit Readiness
Maintain a centralized audit evidence repository:
o Capture screenshots, logs, and reports
o Ensure all activities are properly documented for external audits
• Administrative & Security Operations Support
Perform day-to-day IT and security administrative tasks while ensuring:
o Full traceability of actions
o Proper documentation for CISO review and approval
Required Qualifications
• Experience
o At least 2+ years of experience in a Security Operations, IT Administration, or Compliance-focused role
o Hands-on experience supporting SOC 2, ISO 27001, and/or HIPAA environments
• Jira Expertise
o Strong experience in Jira administration
o Ability to build workflows, manage permissions, and configure custom fields
• Security & Compliance Knowledge
o Solid understanding of:
? Data privacy and protection
? Risk management practices
? Security controls in healthcare or regulated environments
• Documentation & Attention to Detail
o Strong documentation discipline
o Ability to produce audit-ready evidence consistently
• Audit Support Experience
o Experience preparing for or supporting third-party audits is highly preferred
Preferred Qualifications
• Experience working in healthcare, BPO, or compliance-driven environments
• Familiarity with cloud platforms (e.g., AWS, Azure, or GCP)
• Relevant certifications (e.g., Security+, ISO 27001, or similar) are a plus
