Staff Engineer - IT
R1 RCM, Inc.
About the role
R1’s IT Security Team is seeking an accomplished IT Risk and Management (ITRM) Lead Staff Engineer. This position will primarily concentrate on automating User Access Reviews and ensuring Audit Compliance, along with other ITRM responsibilities as assigned. The selected candidate will oversee user access review automation, maintain regulatory compliance, and actively support audit functions. This role requires deep expertise in access control, compliance mandates, and hands-on experience with implementing and managing automated solutions.
Key Responsibilities:
*User Access Review Automation: *
• Design, implement, and manage automated user access review solutions.
• Develop, enhance, and maintain scripts, tools, and processes to optimize access review workflows.
• Collaborate closely with IT and security teams to integrate access review systems into the existing technology landscape.
• Continuously monitor and verify the accuracy and effectiveness of automated access review processes.
• Perform quality assurance (QA) reviews to ensure process integrity.
*Audit Compliance: *
• Maintain compliance with all relevant regulatory frameworks, such as SOX, SOC 2, PCI, HIPAA, and other applicable standards.
• Prepare and manage documentation to support both internal and external audits and compliance reviews.
• Conduct periodic internal audits to confirm adherence to established access control policies and procedures.
• Provide required documentation and address issues during external audits.
• Conduct or support Vendor Audits to ensure that R1’s vendors comply with contractual and regulatory obligations.
Qualifications:
• Bachelor’s degree in information technology, Cybersecurity, Business Administration, or related field.
• Demonstrated experience in user access review automation, audit compliance, or similar disciplines.
• Strong command of access control methodologies, regulatory frameworks, and compliance standards.
• Proficiency in scripting and automation technologies (e.g., Python, PowerShell, Java).
• Practical experience with identity and access management (IAM) systems and associated tools.
• Superior analytical, problem-solving, and organizational abilities.
• Excellent communication and interpersonal skills with a proven ability to collaborate effectively with cross-functional teams.
• Relevant certifications such as CISA, CISM, CISSP, or equivalent credentials are highly desirable.
Working in an evolving healthcare setting, we use our shared expertise to deliver innovative solutions. Our fast-growing team has opportunities to learn and grow through rewarding interactions, collaboration and the freedom to explore professional interests.
Our associates are given valuable opportunities to contribute, to innovate and create meaningful work that makes an impact in the communities we serve around the world. We also offer a culture of excellence that drives customer success and improves patient care. We believe in giving back to the community and offer a competitive benefits package. To learn more, visit: r1rcm.com
Visit us on Facebook
Requirements
- Bachelor’s degree in information technology, Cybersecurity, Business Administration, or related field
- Experience in user access review automation, audit compliance, or similar disciplines
- Strong command of access control methodologies, regulatory frameworks, and compliance standards
- Proficiency in scripting and automation technologies (e.g., Python, PowerShell, Java)
- Practical experience with identity and access management (IAM) systems and associated tools
- Superior analytical, problem-solving, and organizational abilities
- Excellent communication and interpersonal skills
Responsibilities
- Design, implement, and manage automated user access review solutions
- Develop, enhance, and maintain scripts, tools, and processes to optimize access review workflows
- Collaborate with IT and security teams to integrate access review systems
- Monitor and verify the accuracy and effectiveness of automated access review processes
- Perform quality assurance (QA) reviews to ensure process integrity
- Maintain compliance with regulatory frameworks (SOX, SOC 2, PCI, HIPAA, etc.)
- Prepare and manage documentation for internal and external audits
- Conduct periodic internal audits for access control policies
- Address issues during external audits
- Conduct or support Vendor Audits
Benefits
Skills
Don't send a generic resume
Paste this job description into Mimi and get a resume tailored to exactly what the hiring team is looking for.
Get started free