Role overview

Qualifications

5+ years of experience with HIPAA Assessments and Reporting
5+ years of experience with HIPAA guidelines, such as NIST Special Publication 800-66 Rev. 2
Hands-on experience conducting privacy assessments/audits
Strong understanding of data flows and data lifecycle

Responsibilities

Identify Electronic Protected Health Information (ePHI)
Identify Threats and Vulnerabilities
Assess Security Measures
Document and Prioritize Findings

Key facts

Remote from: Anywhere, United States
Freelance
Senior (5-10 years)
Compliance Manager
English

Hard skills

Health Insurance Portability And Accountability Act (HIPAA) Compliance Privacy Impact Assessments Data Management Vulnerability Assessments Threat Assessment gRPC Cyber Security Internal Documentation

Other skills

Communication
Analytical Thinking
Detail Oriented

About the company

TestPros

Information Technology & Services

TestPros brings the latest relevant software life-cycle process methodologies, process improvement methods, test/QA methodologies, tools and industry best-practice knowledge to our customers. We continue to push the boundaries of technology by developing exciting and innovative IT services for the global market. We have a culture of innovation where our employees can make a difference, and are always looking for the best and brightest talent to join our team and further their career. Like-minded, dynamic individuals are encouraged to apply. Established in 1988, TestPros provides Independent Assessment and Security Services. Our range of services includes Cybersecurity, Testing, Independent Verification and Validation (IV&V), Quality Assurance, Software/Systems Testing, Automated Testing, Test Range/Test Lab operations, Section 508/WCAG Accessibility, Program Management, Oversight, Cyber Security, FedRAMP Cloud Security, 800-171, Information Assurance, Software Assurance, Configuration Management, Continuous Integration, Help Desk, and software lifecycle services. TestPros supports both government and commercial clients. On the government side, we are a prime contractor on the DHS EAGLE II vehicle in Functional Category 3. We have many other contract vehicles, including a GSA MAS and GSA VETS2, which make us easy to engage. On the commercial side, we work with companies ranging from small start-ups looking to validate the functionality of their products under development, to Fortune 50 corporations augmenting their test operations or independently verifying the security (RMF, ISO/IEC 27000 series) and accessibility (WCAG / Section 508) compliance of their products.

Company details

Company typeSME

IndustryInformation Technology & Services

Company size51 - 200

Links

Website LinkedIn See all jobs

Your match analysis

See how your profile stacks up against this role.

We compared the job requirements to your profile to show where you're strong and where you fall short.

Job description

TestPros delivers innovative independent IT assessment solutions to critical challenges facing the nation and the world. We support the U.S. Federal Government and Commercial clients within the continental USA. TestPros is dedicated to making lives better, safer and more secure.

Focus: HIPAA Assessment and Consultation

Start: Future projects late 2026 or 2027 (not an immediate job opening)

Type: Part-time consulting

Overview

We are seeking a HIPAA Compliance Assessor / Consultant to support independent assessments of HIPAA compliance.
This role will evaluate how websites, apps, or platforms collect, use, and protect user data, with a focus on minors/children.

Key Responsibilities

Identify Electronic Protected Health Information (ePHI): Locate all systems holding sensitive data.
Identify Threats and Vulnerabilities: Determine potential, reasonably anticipated threats.
Assess Security Measures: Evaluate current safeguards.
Determine Likelihood and Impact: Evaluate the probability and impact of potential breaches.
Document and Prioritize Findings: Create the formal report and risk mitigation plan.

Required Skills / Experience

5+ years of experience with HIPAA Assessments and Reporting
5+ years of experience with HIPAA guidelines, such as:
- NIST Special Publication 800-66 Rev. 2: Implementing the HIPAA Security Rule
- NIST Cyber Security Framework to HIPAA Security Rule Crosswalk
- Health Information Trust Alliance (HITRUST)
Hands-on experience conducting:
- Privacy assessments / audits
- PIA / DPIA
Strong understanding of:
- Data flows & data lifecycle
- User data handling in web/mobile applications
Experience reviewing:
- Consumer-facing systems (apps, websites)
- Consent, transparency, and privacy controls
Ability to translate regulations into practical findings and recommendations

Nice to Have

Background in GRC, cybersecurity, or product compliance
Certifications such as:
- CIPP, CIPM, CISM, or similar

Work Setup

Part-time (consulting basis)
1099 or Corp-to-Corp
Flexible hours
Project-based (initial assessment engagement)

Rate: $50-85/hr (1099 or Corp. to Corp.) This range represents a good-faith estimate and is not a guarantee; final compensation is determined by factors such as experience, qualifications, and government contract labor rate requirements and may fall outside the stated range.

Equal Opportunity Employer
TestPros is an equal-opportunity employer and does not discriminate in employment based on race, color, religion, sex (including pregnancy and gender identity), national origin, political affiliation, sexual orientation, marital status, disability, genetic information, age, membership in an employee organization, retaliation, parental status, military service, or any other non-merit factor.

Offer Considerations
TestPros considers several factors when extending an offer, including but not limited to, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, geographic location, education, and certifications.

Federal Compliance
As a federal contractor, TestPros is subject to all federal and state mandates and/or other customer requirements.