At least 5 years of experience with HIPAA assessments and reporting.
At least 5 years of experience with HIPAA guidelines, including NIST Special Publication 800-66 Revision 2, Implementing the HIPAA Security Rule; the NIST Cybersecurity Framework to HIPAA Security Rule Crosswalk; and the Health Information Trust Alliance framework.
Hands-on experience conducting privacy assessments or audits and privacy impact assessments or data protection impact assessments.
Strong understanding of data flows and data lifecycle management.
Strong understanding of user data handling in web and mobile applications.
Experience reviewing consumer-facing systems, including applications and websites.
Experience reviewing consent, transparency, and privacy controls.
Ability to translate regulations into practical findings and recommendations.
Responsibilities
Identify electronic protected health information by locating all systems holding sensitive data.
Identify threats and vulnerabilities by determining potential, reasonably anticipated threats.
Assess security measures by evaluating current safeguards.
Determine the likelihood and impact of potential breaches.
Document and prioritize findings by creating the formal report and risk mitigation plan.
Desired Qualifications
Background in governance, risk, and compliance, cybersecurity, or product compliance.
Certifications such as Certified Information Privacy Professional, Certified Information Privacy Manager, Certified Information Security Manager, or similar.
TestPros delivers innovative independent IT assessment solutions to critical challenges facing the nation and the world. We support the U.S. Federal Government and Commercial clients within the continental USA. TestPros is dedicated to making lives better, safer and more secure.
Focus: HIPAA Assessment and Consultation
Start: Future projects late 2026 or 2027 (not an immediate job opening)
Type: Part-time consulting
Overview
We are seeking a HIPAA Compliance Assessor / Consultant to support independent assessments of HIPAA compliance. This role will evaluate how websites, apps, or platforms collect, use, and protect user data, with a focus on minors/children.
Key Responsibilities
Identify Electronic Protected Health Information (ePHI): Locate all systems holding sensitive data.
Identify Threats and Vulnerabilities: Determine potential, reasonably anticipated threats.
Assess Security Measures: Evaluate current safeguards.
Determine Likelihood and Impact: Evaluate the probability and impact of potential breaches.
Document and Prioritize Findings: Create the formal report and risk mitigation plan.
Required Skills / Experience
5+ years of experience with HIPAA Assessments and Reporting
5+ years of experience with HIPAA guidelines, such as:
NIST Special Publication 800-66 Rev. 2: Implementing the HIPAA Security Rule
NIST Cyber Security Framework to HIPAA Security Rule Crosswalk
Health Information Trust Alliance (HITRUST)
Hands-on experience conducting:
Privacy assessments / audits
PIA / DPIA
Strong understanding of:
Data flows & data lifecycle
User data handling in web/mobile applications
Experience reviewing:
Consumer-facing systems (apps, websites)
Consent, transparency, and privacy controls
Ability to translate regulations into practical findings and recommendations
Nice to Have
Background in GRC, cybersecurity, or product compliance
Certifications such as:
CIPP, CIPM, CISM, or similar
Work Setup
Part-time (consulting basis)
1099 or Corp-to-Corp
Flexible hours
Project-based (initial assessment engagement)
Rate: $50-85/hr (1099 or Corp. to Corp.) This range represents a good-faith estimate and is not a guarantee; final compensation is determined by factors such as experience, qualifications, and government contract labor rate requirements and may fall outside the stated range.
Equal Opportunity Employer TestPros is an equal-opportunity employer and does not discriminate in employment based on race, color, religion, sex (including pregnancy and gender identity), national origin, political affiliation, sexual orientation, marital status, disability, genetic information, age, membership in an employee organization, retaliation, parental status, military service, or any other non-merit factor.
Offer Considerations TestPros considers several factors when extending an offer, including but not limited to, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, geographic location, education, and certifications.
Federal Compliance As a federal contractor, TestPros is subject to all federal and state mandates and/or other customer requirements.