Sr. Healthcare Cybersecurity Consultant

IGI Cybersecurity is seeking experienced independent consultants with strong healthcare cybersecurity and HIPAA expertise. The consultant will support client-facing assessments, risk analysis, remediation planning, and ongoing security program advisory engagements for healthcare organizations, business associates, and healthcare technology providers.

This role requires a practical consulting mindset, strong written and verbal communication skills, and the ability to independently guide clients from assessment findings to prioritized security improvements. IGI plans to engage multiple consultants on a project basis. As the practice grows, a contractor may be considered for a future full-time position based on business need, performance, and mutual interest.

Primary Responsibilities

• Conduct HIPAA gap assessments covering the Security Rule, Breach Notification Rule, Business Associate requirements, Privacy Governance requirements, and applicable proposed Security Rule modernization requirements.
• Perform HIPAA risk assessments that identify the ePHI environment, evaluate threats and vulnerabilities, assess existing safeguards, and produce prioritized risk registers and treatment recommendations.
• Deliver combined HIPAA Security Assessments that connect compliance gaps with organizational risks and establish an integrated remediation roadmap.
• Provide HIPAA-focused security program advisory services, including recurring client meetings, roadmap oversight, risk register maintenance, remediation guidance, and policy and procedure template support.
• Lead stakeholder interviews, review client documentation and evidence, and clearly communicate findings to technical, operational, and executive audiences.
• Prepare professional reports, recommendations, and executive presentations that are practical, concise, and defensible.