Information Technology Compliance Analyst
Augmedix, Bangladesh

About Augmedix:
Augmedix (Nasdaq: AUGX) delivers industry-leading, ambient medical documentation and data solutions to healthcare systems, physician practices, hospitals, and telemedicine practitioners.
Augmedix is on a mission to help clinicians and patients form a human connection by seamlessly integrating our technology at the point of care. Augmedix’s proprietary platform digitizes natural clinician-patient conversations, which are converted into comprehensive medical notes and structured data in real time. The company’s platform uses automatic speech recognition, and natural language processing, including large language models, to generate accurate and timely medical notes that are transferred into the EHR.
Augmedix’s products relieve clinicians of administrative burden, in turn, reducing burnout, increasing clinician efficiency and improving patient access. Through Augmedix’s proprietary platform and bi-directional communication channel, Augmedix is ideally suited to serve as the vehicle for change at the point of care.
Augmedix is headquartered in San Francisco, CA, with offices around the world. To learn more, visitwww.augmedix.com.
About The Role: We are seeking an Information Technology Compliance Analyst to join our team. The role will protect Augmedix and its customers’ information while ensuring compliance with the security controls framework, including HIPAA, NIST, and HITRUST. The location of work is the Augmedix Bangladesh office in Dhaka. The position will use Augmedix's applicable security frameworks to assess information security controls over all Augmedix Operation Centers and its products for compliance. The position will audit/check key systems and processes to determine security controls implementation, assist in the execution of the security control assessment plan by following AX standard assessment procedures, collect, and analyze evidence, document steps taken and findings, update the System Security Plan with actual internal controls that have been implemented as determined during assessment. Conduct penetration testing on cloud/network and web/mobile applications. The position may require travel to Augmedix’s service provider sites (India, Sri Lanka) for information security control assessments.Responsibilities:

• Cope up with the Augmedix GRC platform and maintain audit records within the platform.
• Examine Augmedix-owned and partner-owned Operation center’s IT infrastructure, evaluate the design and operational effectiveness, determine risk exposure, and develop remediation strategies.
• Respond to all system and/or network security incidents via email or GRC platform.
• Participate in vulnerability scanning, penetration testing, and security assessment with the application security team.
• Plan, implement, monitor, and upgrade security measures for the protection of the organization’s data, systems, and networks.
• Participate in the change management process. Test and identify application, network, and system vulnerabilities, and create counteractive strategies to protect the network.
• Conduct efficient and effective IT audit procedures and communicate complex technical issues in simplified terms to the relevant staff.
• Perform regular audit testing and Review, evaluate, and test application controls.
• Provide recommendations and guidance on identified security and control risks.
• Develop a strong understanding of business and system processes and prepare detailed audit reports for documentation and presentation.
• Complete the given assignment and submit it to the supervisor as per the agreed timeline.
• Being proactive, being a team player, and maintaining liaison with all the stakeholders is required.

Requirements:

• Excellent communication in English is essential.
• Minimum 2 years of working experience in IT Audit/ Information Security Management. Experience in IT Security Consulting and/or IT Security Audit organizations will be a benefit.
• Degree in Information Technology or equivalent discipline.
• Certification on CISA/ ISO 27001 LA will be preferred.
• Knowledge of different industry security standards e.g. ISO, NIST, CIS will add extra value and overall IT Security domains are required.
• Ability to work under pressure in, a fast-paced environment attention to detail, and great awareness of cybersecurity trends and hacking techniques are plus points.

Details:

• Work Shift:Day (11 AM- 8 PM)
• Weekdays:Monday to Friday
• Fully Subsidized Meals amp; Snacks

Augmedix is an equal opportunity employer. We are committed to providing equal employment opportunities regardless of sex, gender identity, race, religious creed, color, ancestry, age, disability, marital status, sexual orientation including be