Key Facts

Remote From:

Anywhere

Freelance

Senior (5-10 years)

English

Hard Skills

Other Skills

•
Program Management
•
Quality Assurance
•
Communication
•
Analytical Thinking
•
Detail Oriented
•
Report Writing

Roles & Responsibilities

5+ years of hands-on HIPAA assessments and reporting experience
5+ years applying HIPAA guidelines (e.g., NIST SP 800-66 Rev. 2) and mapping to the HIPAA Security Rule; NIST CSF crosswalk
Hands-on privacy assessments (PIA/DPIA) and experience reviewing consumer-facing systems (web/mobile) for data flows and privacy controls
Certifications such as CIPP, CIPM, or CISM (or equivalent) and/or background in GRC/cybersecurity

Requirements:

Identify Electronic Protected Health Information (ePHI): Locate all systems holding sensitive data
Identify Threats and Vulnerabilities: Determine potential, reasonably anticipated threats
Assess Security Measures: Evaluate current safeguards
Document and Prioritize Findings: Create the formal report and risk mitigation plan

TestPros

Information Technology & Services

About TestPros

TestPros brings the latest relevant software life-cycle process methodologies, process improvement methods, test/QA methodologies, tools and industry best-practice knowledge to our customers. We continue to push the boundaries of technology by developing exciting and innovative IT services for the global market. We have a culture of innovation where our employees can make a difference, and are always looking for the best and brightest talent to join our team and further their career. Like-minded, dynamic individuals are encouraged to apply. Established in 1988, TestPros provides Independent Assessment and Security Services. Our range of services includes Cybersecurity, Testing, Independent Verification and Validation (IV&V), Quality Assurance, Software/Systems Testing, Automated Testing, Test Range/Test Lab operations, Section 508/WCAG Accessibility, Program Management, Oversight, Cyber Security, FedRAMP Cloud Security, 800-171, Information Assurance, Software Assurance, Configuration Management, Continuous Integration, Help Desk, and software lifecycle services. TestPros supports both government and commercial clients. On the government side, we are a prime contractor on the DHS EAGLE II vehicle in Functional Category 3. We have many other contract vehicles, including a GSA MAS and GSA VETS2, which make us easy to engage. On the commercial side, we work with companies ranging from small start-ups looking to validate the functionality of their products under development, to Fortune 50 corporations augmenting their test operations or independently verifying the security (RMF, ISO/IEC 27000 series) and accessibility (WCAG / Section 508) compliance of their products.

Company type: SME

Industry: Information Technology & Services

Founded: 2018

Company size: 51 - 200

Website LinkedIn See all jobs →

Job description

Company Overview

TestPros is a successful and growing business, established in 1988 to provide Information Technology (IT) technical support services to a wide range of Commercial and U.S. Federal, State, and Local Government customers. Our capabilities include Program Management, Program Oversight, Process Audit, Intelligence Analysis, Cyber Security, NIST SP 800-171 / CMMC Assessment and Compliance, HIPAA, Privacy, Computer Forensics, Software Assurance, Software Testing, Test Automation, Section 508 and WCAG Accessibility Assessment, Localization Testing, Independent Verification and Validation (IV&V), Quality Assurance (QA), Compliance, and Research and Development (R&D) services. TestPros is an Equal Opportunity Employer.

TestPros delivers innovative independent IT assessment solutions to critical challenges facing the nation and the world. We support the U.S. Federal Government and Commercial clients within the continental USA. TestPros is dedicated to making lives better, safer and more secure.

Focus: HIPAA Assessment and Consultation
Start: April 2026
Type: Part-time consulting

Overview

We are seeking a HIPAA Compliance Assessor / Consultant to support independent assessments of HIPAA compliance.

This role will evaluate how websites, apps, or platforms collect, use, and protect user data, with a focus on minors/children.

Key Responsibilities

Identify Electronic Protected Health Information (ePHI): Locate all systems holding sensitive data.
Identify Threats and Vulnerabilities: Determine potential, reasonably anticipated threats.
Assess Security Measures: Evaluate current safeguards.
Determine Likelihood and Impact: Evaluate the probability and impact of potential breaches.
Document and Prioritize Findings: Create the formal report and risk mitigation plan.

Required Skills / Experience

5+ years of experience with HIPAA Assessments and Reporting
5+ years of experience with HIPAA guidelines, such as:
- NIST Special Publication 800-66 Rev. 2: Implementing the HIPAA Security Rule
- NIST Cyber Security Framework to HIPAA Security Rule Crosswalk
- Health Information Trust Alliance (HITRUST)
Hands-on experience conducting:
- Privacy assessments / audits
- PIA / DPIA
Strong understanding of:
- Data flows & data lifecycle
- User data handling in web/mobile applications
Experience reviewing:
- Consumer-facing systems (apps, websites)
- Consent, transparency, and privacy controls
Ability to translate regulations into practical findings and recommendations

Nice to Have

Background in GRC, cybersecurity, or product compliance
Certifications such as:
- CIPP, CIPM, CISM, or similar

Work Setup

Part-time (consulting basis)
1099 or Corp-to-Corp
Flexible hours
Project-based (initial assessment engagement)

TestPros, Inc. is an Equal Opportunity Employer.

EEO Statement

All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, gender identity, marital status, age, national origin, protected veteran status, or disability. VEVRAA Federal Contractor.