Senior Security Assessor

Our fax-delivery suite of products allows our clients to exchange millions of patient information, insurance and other documents safely, swiftly and securely every business day. Concord's use of Artificial Intelligence, analytics, and other cutting-edge technology also analyzes the data being transferred within a fax, then delivers it into the right inboxes and workflows, fundamentally changing how data moves.

More than 2,300 healthcare organizations, financial providers, and companies in other equally document-intensive industries trust Concord to deliver their confidential and sensitive information. We care about our customers, and with a retention rate of more than 98%, it's clear they love the service and value we provide.

We have been in business since 1996 and growing faster than ever. Our products are getting smarter, our customers are getting bigger, and our user community is exploding. To continue meeting market demand and anticipating our customers’ needs, we are expanding our offerings. That means assembling a world-class team to take us through this next phase of growth. We hope you'd like to join us!

About the role

We are looking for a highly motivated Senior Security Assessor to join our Cyber Risk & Security team. In this role, you will play a critical part in maintaining and improving our security posture by conducting internal audits and assessments, building continuous monitoring dashboards, and supporting ongoing security and compliance initiatives. You will also assist with security-related legal reviews and respond to customer security questionnaires. This position is ideal for someone with a strong background in governance, risk, and compliance who thrives in a collaborative environment.

Essential Functions:

• Lead and execute internal security audits and assessments to ensure compliance with organizational policies and industry standards.
• Monitor and report on control health and audit readiness, providing leadership with visibility into compliance and security posture and potential risks.
• Complete and manage customer security questionnaires and due diligence requests.
• Support risk assessments and remediation efforts across the organization.
• Collaborate with cross-functional teams to drive security and compliance initiatives.
• Stay informed on regulatory requirements, security frameworks, and best practices.

Required Qualifications:

• 4-6 years of experience in information security, IT internal audit, compliance, or risk management.
• Hands-on experience with HITRUST and SOC 2 audits and frameworks.
• Strong understanding of security governance, risk, and compliance principles.
• Excellent communication, documentation, and organizational skills.
• Ability to manage multiple priorities and work independently.
• Experience with GRC tools, preferably Archer GRC

Preferred Qualifications:

• Experience with additional frameworks (ISO 27001, NIST, FedRAMP).
• Strong understanding of AI governance frameworks and principles.
• Knowledge of vendor risk management processes.
• Relevant certifications (e.g., CISSP, CISA, CRISC, HITRUST CCSFP).

Additional employee benefits at Concord Technologies:

• 401K plan w/ 6% company match (vests immediately)
• Flex-Time off + sick time
• 10 company holidays
• Full suite of health benefits (Medical, Dental, Vision) - employee only coverage covered at 100% (no employee cost). For employees + dependents, Concord covers 60% of premiums.
• Voluntary insurance options:
• Employee Life and AD&D
• Spousal Life and AD&D
• Child Life and AD&D
• Paid Parental Leave program
• Free unlimited ORCA card (Seattle area residents)
• Employee Rewards and Recognition through NectarHR
• Unlimited access to Udemy for Business

Concord Technologies is an Equal Employment Opportunity (EEO) employer. It is the policy of the Company to provide equal employment opportunities to all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veteran or disabled status, or genetic information.