Insight Therapy Solutions is seeking a freelance consultant to audit our WordPress website for HIPAA compliance privacy and security risks. The consultant will assess how sensitive data including potential PHI is collected stored processed and shared then provide actionable recommendations to strengthen compliance and security.
Responsibilities
Audit WordPress setup hosting plugins forms integrations tracking tools and user access.
Identify HIPAA privacy and security gaps related to PHI handling encryption access control backups logging and third-party vendors.
Assess risks involving CRMs analytics tools email platforms payment tools APIs and form builders.
Review overall website security posture and identify vulnerabilities or misconfigurations.
Provide a concise audit report with findings risk levels and prioritized remediation steps.
Requirements Skills
Strong WordPress security and technical audit experience.
Hands-on HIPAA compliance experience for healthcare or regulated websites.
Knowledge of website privacy consent management data retention and third-party risk.
Familiarity with OWASP SSL/TLS firewalls malware scanning backups and least-privilege access.
Clear communication and documentation skills.
Deliverables
HIPAA privacy and security audit report
Risk and data flow summary
Prioritized remediation plan
Required Skills:
Required Skills Strong WordPress security and technical audit experience. Practical HIPAA compliance experience for healthcare or regulated websites. Knowledge of privacy data protection consent cookies data retention and third-party risk. Familiarity with OWASP secure hosting SSL/TLS firewalls malware scanning backups vulnerability management and least-privilege access. Clear communication and documentation skills. Deliverables HIPAA privacy and security audit report. Data flow and risk summary. Prioritized remediation plan.
This is a remote position.Position OverviewInsight Therapy Solutions is seeking a freelance consultant to audit our WordPress website for HIPAA compliance privacy and security risks. The consultant will assess how sensitive data including potential PHI is collected stored processed and shared the...
This is a remote position.
Position Overview
Insight Therapy Solutions is seeking a freelance consultant to audit our WordPress website for HIPAA compliance privacy and security risks. The consultant will assess how sensitive data including potential PHI is collected stored processed and shared then provide actionable recommendations to strengthen compliance and security.
Responsibilities
Audit WordPress setup hosting plugins forms integrations tracking tools and user access.
Identify HIPAA privacy and security gaps related to PHI handling encryption access control backups logging and third-party vendors.
Assess risks involving CRMs analytics tools email platforms payment tools APIs and form builders.
Review overall website security posture and identify vulnerabilities or misconfigurations.
Provide a concise audit report with findings risk levels and prioritized remediation steps.
Requirements Skills
Strong WordPress security and technical audit experience.
Hands-on HIPAA compliance experience for healthcare or regulated websites.
Knowledge of website privacy consent management data retention and third-party risk.
Familiarity with OWASP SSL/TLS firewalls malware scanning backups and least-privilege access.
Clear communication and documentation skills.
Deliverables
HIPAA privacy and security audit report
Risk and data flow summary
Prioritized remediation plan
Required Skills:
Required Skills Strong WordPress security and technical audit experience. Practical HIPAA compliance experience for healthcare or regulated websites. Knowledge of privacy data protection consent cookies data retention and third-party risk. Familiarity with OWASP secure hosting SSL/TLS firewalls malware scanning backups vulnerability management and least-privilege access. Clear communication and documentation skills. Deliverables HIPAA privacy and security audit report. Data flow and risk summary. Prioritized remediation plan.