> Markdown version of [/jobs/ext/4337905-4745-security-engineer-ii-grc](https://www.wearedevelopers.com/jobs/ext/4337905-4745-security-engineer-ii-grc). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # 4745-Security Engineer II (GRC) - **Company:** Innovaccer, Inc. - **Location:** United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Amazon Web Services, Microsoft Azure, Cyber Security, Data Security, Disaster Recovery, Cloud Platform System, Information Technology, Plan of Action and Milestones - **Published:** October 12, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=907843814818b00d ## About the Role * Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field preferred * 4-6 years of prior experience in Information Security Risk & Compliance / GRC * Hands-on experience with implementation or assessment of HIPAA, SOC 2 Type II, ISO 27001, HITRUST, or similar security and compliance frameworks * Strong understanding of security, privacy, risk, governance, and compliance controls * Experience with Vendor Risk Assessment / Third-Party Risk Management * Experience responding to RFPs, security questionnaires, customer assessments, and legal/security exhibits * Experience working with internal teams for audit, compliance, and evidence collection activities * Familiarity with US federal and state security and compliance frameworks, including FedRAMP, GovRAMP/StateRAMP, NIST SP 800-53, MARS-E, and ARC-AMPE * Understanding of POA&M, Continuous Monitoring (ConMon), security assessments, authorization processes, SSP, and 3PAO assessment activities * Familiarity with GDPR, HITECH, US state privacy/security regulations, and Middle-East privacy regulations including PDPL * Familiarity with cloud environments such as AWS, Azure, and/or GCP * Strong documentation, analytical, communication, and stakeholder-management skills * Able to work independently, multitask, prioritize, and manage time effectively * Collaborates effectively and communicates efficiently with technical and non-technical stakeholders * Willingness to work with teams and customers across the US and Middle-East time zones * Good to have ISO 27001 LA/LI, CISA, CRISC, or other relevant security and compliance certifications. ## Description We at Innovaccer are looking for a Security Engineer - II (GRC) who will be responsible for Governance, Risk & Compliance activities within our Cyber Security team across internal, customer, commercial and public-sector environments. This role will encompass Security Questionnaires, RFPs, Vendor Risk Management, Internal and External Audits, Security & Privacy Policies, Regulatory Compliance, Data Security, and Federal/State Compliance Programs. The role will provide exposure to multiple security domains and cloud platforms while supporting Innovaccer's growing healthcare, public-sector, and AI security programs A Day in the Life * Responding to RFPs & Security Questionnaires. * Coordinating with RFP, Legal, Privacy, Product, Engineering, and IT teams on security questionnaires, security exhibits, BAA/MSA/DPA queries, and customer follow-ups * Experience performing Risk Assessments, Business Impact Analysis (BIA), Business Continuity/Disaster Recovery, and Tabletop Exercises * Analyzing and updating existing security, privacy, and compliance policies, procedures, and documentation * Supporting implementation of privacy, data protection, and security controls * Driving Vendor Risk Assessment & Third-Party Risk Management activities * Supporting internal and external audits including SOC 2 Type II, HIPAA, HITRUST, ISO 27001, and other applicable frameworks * Supporting FedRAMP, GovRAMP/StateRAMP, and public-sector compliance initiatives. * Supporting control implementation and assessment aligned with NIST SP 800-53. * Maintaining and tracking POA&M, remediation activities, risk registers, and control gaps. * Supporting Continuous Monitoring (ConMon) activities and audit/assessment evidence collection. * Coordinating with internal teams for gathering, validating, and presenting audit and compliance evidence. * Supporting third-party assessments and coordination with 3PAOs and external auditors * Identifying control gaps/weaknesses and formulating action plans to address them * Supporting security and privacy requirements across US healthcare, federal/state, and Middle-East regulations. * Supporting AI governance and security initiatives, including ISO 42001 and NIST AI RMF.