Cybersecurity GRC Engineer

How you move is why were here.
Now more than ever.

Get back to what you need and love to do.
The possibilities are endless...

Now more than ever our guiding principles are helping us in our search for exceptional talent - candidates who align with our unique workplace culture and who want to maximizethe abundant opportunities for growth and success.

If this describes you then lets talk!

HSS is consistently among the top-ranked hospitals for orthopedics and rheumatology by U.S. News & World Report. As a recipient of the Magnet Award for Nursing Excellence HSS was the first hospital in New York City to receive the distinguished designation. Whether you are early in your career or an expert in your field you will find HSS an innovative supportive and inclusive environment.

Working with colleagues who love what they do and are deeply committed to our Mission you too can be part of our transformation across the enterprise.

Emp Status

Regular Full time

Work Shift

Compensation Range

The base pay scale for this position is $101500.00 - $154750.00. In addition this position will be eligible for additional benefits consistent with the role. The salary of the finalist selected for this role will be determined based on various factors including but not limited to: scope of role level of experience education accomplishments internal equity budget and subject to Fair Market Value evaluation. The hiring range listed is a good faith determination of potential compensation at the time of this job advertisement and may be modified in the future.

This role is ideal for someone who understands both the language of security frameworks and the realities of modern technical infrastructure. You will help design implement validate and continuously improve security controls across systems applications cloud platforms vendors and enterprise technologies. You will work closely with cybersecurity engineers analysts architects IT teams compliance partners privacy stakeholders and auditors to strengthen Hospital for Special Surgerys cybersecurity posture through risk-based evidence-driven and automation-enabled practices.

The Cybersecurity GRC Engineer will play a key role in advancing continuous compliance improving audit readiness supporting risk assessments and developing repeatable methods for validating security controls. This position requires technical curiosity sound judgment strong documentation skills and the ability to translate regulatory and framework requirements into actionable engineering outcomes.

• Translate cybersecurity privacy regulatory and framework requirements into technical control objectives validation procedures and measurable security outcomes.
• Design implement and maintain automated workflows for security control testing evidence collection compliance monitoring and audit readiness.
• Develop and support policy-as-code configuration checks compliance dashboards and repeatable validation methods to reduce manual assessment activities.
• Perform technical risk assessments and gap analyses for new and existing technologies systems applications cloud services vendors and business processes.
• Partner with cybersecurity engineering infrastructure application cloud and networking teams to evaluate whether technical controls are implemented effectively and operating as intended.
• Collaborate with IT and engineering teams to embed secure-by-design and data-by-default protection principles into applications services and infrastructure while staying current on modern attack techniques and translating that knowledge into code and tooling.
• Review operating systems applications cloud resources network devices security platforms and third-party technologies against organizational policies standards and secure configuration baselines.
• Correlate vulnerability findings control gaps compliance obligations and business impact to support risk-based remediation prioritization.
• Document control evidence risk decisions remediation plans exceptions and audit artifacts in a structured accurate and repeatable format.
• Collaborate with internal stakeholders external auditors and compliance partners to support audits assessments regulatory inquiries and control validation requests.
• Develop metrics reports diagrams and presentations that communicate cybersecurity risk compliance posture control effectiveness and remediation status to technical and non-technical audiences.
• Provide deep technical incident response support including forensic analysis custom scripting and tool development during security investigations.
• Performs other related duties as assigned.

Non-Discrimination Policy
Hospital for Special Surgery is committed to providing high quality care and skilled compassionate reliable service to our community in a safe and healing environment. Consistent with this commitment Hospital for Special Surgery provides care admits and treats patients and provides all services without regard to age race color creed ethnicity religion national origin culture language physical or mental disability socioeconomic status veteran or military status marital status sex sexual orientation gender identity or expression or any other basis prohibited by federal state or local law or by accreditation standards.