Hill Physicians Medical Group

About the Company

Hill Physicians Medical Group is the largest independent physician association in Northern California and is a nationally known leader in innovative healthcare. Since 1984, we have been providing the communities we serve access to quality healthcare. The over 5,000 physicians who comprise Hill Physicians Medical Group provide care to our Commercial HMO, Medicare Advantage, Medi-Cal and PPO attributed members. PriMed Management Consulting Services is the management services organization for Hill Physicians Medical Group. The employees of PriMed provide technology, financial, clinical support and business services to the physicians comprising Hill Physicians Medical Group.

Listed Jobs

Company Name

Hill Physicians Medical Group

Job Title

Security GRC Engineer - 25-210

Job Description

Job title: Security GRC Engineer - 25-210 Role Summary: Design, implement, and maintain governance, risk, and compliance frameworks for healthcare data protection, ensuring adherence to HIPAA, HITECH, NIST, ISO 27001, and other industry standards. Expectations: Deliver robust risk management strategies, oversee compliance lifecycle, support audits, and foster a security‑aware culture. Key Responsibilities: - Develop and maintain GRC policies, processes, and controls. - Conduct risk assessments, create mitigation plans, and report on risk posture. - Administer SAI360, producing reports and managing policy lifecycle. - Collaborate with cross‑functional teams on secure project design. - Monitor compliance status, identify gaps, and recommend remediation. - Oversee third‑party vendor risk assessments. - Provide audit support, documentation, and resolve findings. - Lead security awareness training and promote compliance culture. Required Skills: - 5+ years in GRC or related field. - Deep knowledge of HIPAA, HITECH, NIST CSF, ISO 27001, COBIT. - Proficiency with SAI360 and privileged access tools (CyberArk). - Strong analytical, organizational, and communication abilities. - Ability to engage technical and non‑technical stakeholders. Required Education & Certifications: - Bachelor’s degree in Computer Science, IT, Cybersecurity, or equivalent experience. - Certifications: CISA, CISM, or CRISC preferred. - Additional exposure to NIST 2.0 compliance and healthcare threat frameworks beneficial.

San ramon, United states

On site

Mid level

30-12-2025