> Markdown version of [/jobs/ext/2110313-senior-cybersecurity-compliance-specialist](https://www.wearedevelopers.com/jobs/ext/2110313-senior-cybersecurity-compliance-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Cybersecurity & Compliance Specialist - **Company:** Amplifon - **Location:** Minneapolis, MN, United States - **Experience:** Expert - **Salary:** $55,000.0 - $62,000.0 - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Cyber Security, Information Systems, Information Technology Audit, Intrusion Detection and Prevention, Security Information and Event Management, Software Vulnerability Management, Information Technology, CIS Benchmarks - **Published:** August 19, 2026 - **Apply:** https://www.careerjet.com/job/us25158d35acfee940ad4ec52eb60222bf/eaa ## About the Role * 5+ years of professional experience in cybersecurity, IT compliance, IT risk management, or IT audit roles. * Solid knowledge of cybersecurity frameworks and standards (e.g., HITRUST CSF, ISO 27001, NIST CSF, CIS Controls) and relevant healthcare regulations (e.g., HIPAA). * Familiarity with risk assessment methodologies, security monitoring tools, audit processes, vulnerability management, and incident response procedures. * Knowledge of supply chain security and third-party risk management practices. * Strong organizational and documentation skills, an analytical mindset, and exceptional attention to detail. * Good communication and interpersonal skills to work effectively with cross functional teams and external auditors. * Ability to work independently and manage multiple priorities in a dynamic environment., * Relevant professional certifications such as Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or HITRUST CSFP. * Direct experience with compliance management platforms and GRC (Governance, Risk & Compliance) tools. * Demonstrated ability to lead technology risk changes across a large organization. * Knowledge of healthcare industry regulations and data protection requirements. ## Description We are seeking a Senior Cybersecurity & Compliance Specialist who is ready to join an organization that combines passion and performance to shape a better world. As a Global Top Employer 2026, Amplifon is a place where your expertise improves lives and accelerates your career. In this role, you will support the implementation, monitoring, and enforcement of cybersecurity measures and regulatory compliance across the organization, ensuring IT systems and processes align with internal policies, data protection laws, and industry standards like HITRUST r2 and SOC2 Type II. Key responsibilities include conducting risk assessments, supporting audits, managing security controls, incident response coordination, and promoting awareness to foster a culture of security and compliance throughout the organization., Cybersecurity & Risk Management * Implement and monitor cybersecurity controls to protect organizational systems and data. * Assist with risk assessments and security reviews to identify vulnerabilities and coordinate mitigation actions. * Develop and maintain the organization's cybersecurity posture in alignment with HITRUST r2 and SOC2 Type II frameworks. * Support threat detection, incident response, and timely reporting per regulatory timelines. * Monitor threat intelligence feeds and assist in evaluating emerging cyber threats. Compliance & Regulatory Management * Ensure compliance with internal security policies and regulatory frameworks (e.g. HITRUST, SOC2, HIPAA, ISO 27001, CIS Controls and NIST CSF). * Maintain HITRUST and HIPPA controls including supply chain security, vulnerability management, and business continuity planning. * Support internal and external audits by gathering evidence, providing documentation, and tracking remediation efforts. * Manage the lifecycle of compliance documentation and maintain accurate, up-to-date records of security controls and procedures. * Monitor regulatory changes and apply new compliance obligations. Governance & Stakeholder Collaboration * Partner with IT, business stakeholders, and vendors to embed security and compliance requirements into processes, projects and procurement activities. * Conduct vendor risk assessments and third-party evaluations to satisfy HITRUST & SOC2 supply chain compliance. * Participate in governance committees and security steering groups to provide compliance insights and recommendations. * Support security training and awareness initiatives to foster a culture of compliance and accountability., Please note that AI tools may be used to assist in resume screening. All hiring decisions are made by our recruitment team. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. If selected for an interview, please advise our Human Resources team if you require accommodation during the interview and assessment process and we will work with you to meet your accessibility needs. Candidates must be authorized to work in the United States on a full-time basis without the need for current or future sponsorship. This role is not eligible for visa sponsorship, including but not limited to OPT, CPT, or H-1B. #IND1 ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [A practical guide to writing secure Dockerfiles](https://www.wearedevelopers.com/videos/109-a-practical-guide-to-writing-secure-dockerfiles) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Microservices? Monoliths? An Annoying Discussion!](https://www.wearedevelopers.com/videos/970-microservices-monoliths-an-annoying-discussion) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [OPA for the cloud natives](https://www.wearedevelopers.com/videos/713-opa-for-the-cloud-natives) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)