Senior Cybersecurity & Compliance Specialist
- Compensation
- $120K–$140K
- Location
- MINNEAPOLIS, MN, United States
- Work setup
- Not specified
- Seniority
- Senior
- Employment
- Full time
- Experience
- 5+ years
- Category
- Security
- Posted
Skills
Must have
- 5+ years of professional experience in cybersecurity, IT compliance, IT risk management, or IT audit roles.
- Solid knowledge of cybersecurity frameworks and standards (e.g., HITRUST CSF, ISO 27001, NIST CSF, CIS Controls) and relevant healthcare regulations (e.g., HIPAA).
- Familiarity with risk assessment methodologies, security monitoring tools, audit processes, vulnerability management, and incident response procedures.
- Knowledge of supply chain security and third-party risk management practices.
- Strong organizational and documentation skills, an analytical mindset, and exceptional attention to detail.
- Good communication and interpersonal skills to work effectively with cross functional teams and external auditors.
- Ability to work independently and manage multiple priorities in a dynamic environment.
Nice to have
- Relevant professional certifications such as Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or HITRUST CSFP.
- Direct experience with compliance management platforms and GRC (Governance, Risk & Compliance) tools.
- Demonstrated ability to lead technology risk changes across a large organization.
- Knowledge of healthcare industry regulations and data protection requirements.
Full description
Amp Up Your Career
We are seeking a Senior Cybersecurity & Compliance Specialist who is ready to join an organization that combines passion and performance to shape a better world. As a Global Top Employer 2026, Amplifon is a place where your expertise improves lives and accelerates your career.
In this role, you will support the implementation, monitoring, and enforcement of cybersecurity measures and regulatory compliance across the organization, ensuring IT systems and processes align with internal policies, data protection laws, and industry standards like HITRUST r2 and SOC2 Type II. Key responsibilities include conducting risk assessments, supporting audits, managing security controls, incident response coordination, and promoting awareness to foster a culture of security and compliance throughout the organization.
Compensation: Based on qualifications we anticipate the hiring range will be $120,000-$140,000.Hybrid Work: We require team members to be in our downtown Minneapolis office three days per week, offering flexibility while fostering in-person collaboration.
Benefits Offered:
- Health & Financial: Medical, Dental, Vision, 401(k) with company match, family hearing aid benefits, and tuition reimbursement.
- Work-life Balance: Generous vacation, safe and sick leave, paid holidays, paid volunteer time off, parental leave and bereavement.
- Well-being: Access to our Wellness Hub and Employee Assistance Program (EAP), providing holistic support for you and your family.
- Career Development: Access to Ampli-Academy, LinkedIn Learning, Coursera, team training, and additional specialized training.
- Commuter Support: Reimbursement for transportation (parking downtown, bus or train).
Key Responsibilities:Cybersecurity & Risk Management
- Implement and monitor cybersecurity controls to protect organizational systems and data.
- Assist with risk assessments and security reviews to identify vulnerabilities and coordinate mitigation actions.
- Develop and maintain the organization's cybersecurity posture in alignment with HITRUST r2 and SOC2 Type II frameworks.
- Support threat detection, incident response, and timely reporting per regulatory timelines.
- Monitor threat intelligence feeds and assist in evaluating emerging cyber threats.
Compliance & Regulatory Management
- Ensure compliance with internal security policies and regulatory frameworks (e.g. HITRUST, SOC2, HIPAA, ISO 27001, CIS Controls and NIST CSF).
- Maintain HITRUST and HIPPA controls including supply chain security, vulnerability management, and business continuity planning.