As a Risk Assurance Associate, you will be part of our Global Trust department that covers information security, privacy, and product security risks and certification and will report to one of the Risk & Compliance Managers/Counsel. You will collaborate with members of the entire Global Trust department as well as the Clinical Risk, Clinical Safety, and Compliance teams to support the risk management and assurance support across InterSystems products, services, and operations.

The Risk Assurance Associate responsibilities will include:

Generating risk reports and assessments on technology risks, processes, and controls.
Support of investigation of internal control incidents or control failures, including data breach incidents

current and emerging technologies which may include cloud services (SaaS, PaaS, IaaS), web development tools, virtualization, UNIX, Linux, Windows, and networking and security technologies.

Supporting audits for ISO 27001/ISO 27002, SOC 2, HITRUST, NIST SP 800-53, CSTAR (CAIQ), ISO 27017/27018/27701, OWASP, SLSA, NIST CSF, and/or other leading business and IT control frameworks.
Capturing key risk indicators for domains of information technology general controls, including change management, access to programs and data, computer operations and systems development, cybersecurity and resiliency frameworks.
Reporting and gathering information on key risks and controls, knowledge of privacy/security/risk management controls readiness, controls optimization, including the configuration of controls around security, privacy, business process and within IT environments.
Supporting review of control failures including working with internal and external parties for evidence collection and evaluation, root cause determinations, and recommendation development for Plan of Action and Milestone corrective actions.
Applying internal control principles and business/technical knowledge including information technology general controls and application controls; risk reporting concepts; working experience applying professional skepticism skills.
Assisting with the adaption of work programs and practice aids, as well as perform assessments, using relevant tools to evaluate controls, security, SOD, and potential for optimization.
Exhibiting project management skills, including developing project plans, resource budgets, and deliverables schedules.
Creating a positive environment while meeting management expectations. This includes providing candid, meaningful feedback in a timely manner and keeping leadership informed of progress.
Assisting with interactions with customers on solutions and reviewing projects on customer engagements (implementations).

Required Qualifications:

1+ years of auditing or risk management
Bachelor’s degree in one of the following: Accounting, Finance/Economics, Management, Information Systems, Computer Science, Business, Science, Technology, Engineering & Mathematics and/or other business field of study

Preferred Qualifications:

Certifications such as CIPM, CISA, GSNA, CRMA, or CCSA
Experience and knowledge around controls with risk reporting, compliance, and operational processes within an organization as an auditor or business process specialist, including business process and IT management control.

We are an equal-opportunity employer and do not discriminate because of race, color, religion, sex, national origin, ancestry, marital status, veteran status, age, disability, sexual orientation or gender identity or expression or any other legally protected category. InterSystems is an E-Verify Employer in the United States.

About InterSystems

Established in 1978, InterSystems provides innovative data solutions for organizations with critical information needs in the healthcare, finance, and logistics sectors and beyond. Our cloud-first data platforms solve interoperability, speed, and scalability problems for organizations around the globe. InterSystems also develops and supports data management in hospitals through the world’s most proven electronic medical record, as well as unified care records for health systems and governments through a powerful suite of healthcare data integration solutions. The company is committed to excellence through its award-winning, 24×7 support for customers and partners in more than 80 countries. Privately held and headquartered in Cambridge, Massachusetts, InterSystems has 25 offices worldwide. For more information, please visit InterSystems.com.

Apply for this Job

* Required

First Name *

Last Name *

Email *

Phone *

Resume/CV *

Dropbox

(File types: pdf, doc, docx, txt, rtf)

Cover Letter

Dropbox

(File types: pdf, doc, docx, txt, rtf)

When autocomplete results are available use up and down arrows to review

+ Add another education

LinkedIn Profile

Website

InterSystems Employment History *

  I have never worked at InterSystems
  I am a current InterSystems employee or intern
  I am a former InterSystems employee or intern
  I have worked at an InterSystems Customer or Partner

Job Location *

Please indicate relationship to job location

Do you now or have you previously worked for an InterSystems client? *

Are you currently authorized to work in the U.S.? *

Will you now or in the future require employment-based visa sponsorship to work in the US? *

Please provide your preferred first name or nickname (if different from first name provided above).

DATA PROTECTION INFORMATION NOTICE 2024 *

This Data Protection Information Notice (“Notice”) applies to all job applicants of InterSystems Corporation, with its registered office at One Memorial Drive, Cambridge, MA 01242 USA, and its subsidiaries (“InterSystems” or “Data Controller” or “we,” “us,” or “our”), for the purposes of evaluating your suitability for the advertised position and possible employment with us (hereinafter, “application process”). This Notice covers the:

types of personal information provided by you to us throughout the application process (“your Data”),
purpose of processing (defined below) your Data,
individuals and/or entities with whom your Data may be shared,
transfer of your Data abroad (if at all),
retention period of your Data, and
the right(s) that you have in connection with your Data.

Being a global organisation, InterSystems is committed to safeguarding your Data and complying with applicable data protection, privacy, and security laws and legislations around the world including, but not limited to, the EU General Data Protection Regulation 2016/679 (the “GDPR”), GDPR as saved into UK law (the “UK GDPR”) (references in this Notice to GDPR also include UK GDPR), Data Protection Act 2018 (DPA) (UK), California Consumer Privacy Act (CCPA), The Privacy Act 1988 (Australia) including the Australian Privacy Principles (APP), The Privacy Act 1993 (New Zealand), Brazilian General Data Protection Law (LGPD), Law 19,628/1999 ‘on the protection of private life’ or Personal Data Protection Law (PDPL) (Chile), Personal Information Protection Law (PIPL) (China), Personal Data (Privacy) Ordinance Cap. 486 (Hong Kong), Information Technology Act 2000 read along with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules 2011 (India), Act on Protection of Personal Information (APPI) (Japan), Saudi Arabia’s Personal Data Protection Law (PDPL) and its implementing Regulations (KSA), Personal Data Protection Law N° 29733 (PDPL) and its Regulation (Peru), Personal Data Protection Act 2012 and Amended Act 2020 (PDPA) (Singapore), Protection of Personal Information Act 4 of 2013 (POPIA) (South Africa), the new Swiss Federal Act on Data Protection (nFADP), Personal Data Protection Act (PDPA) (Thailand), the Federal Decree Law No. 45 of 2021 on Personal Data Protection (UAE), and other applicable privacy and data protection laws to the extent that they apply to InterSystems’ processing of your Data (collectively, “Data Protection Laws”). InterSystems is responsible for ensuring that it processes your Data in compliance with applicable Data Protection Laws.

For applicants in the United States, your Data is stored within the continental U.S.

For California residents, please see the CCPA section, for additional disclosures regarding the information we collect in our Privacy Statement at California-Consumer-Privacy-Rights.

Types of Personal Information We Collect (Your Data)

Your Data which InterSystems may process includes, but is not limited to:

Identification data – full name, gender, date of birth, photograph.
Contact details – home address, telephone number, email address, emergency contact.
Employment history – past/present job title/position, office location, performance & disciplinary records, employment references and corresponding contact information.
Assessment records – the results of the Professional Employment Test (PET), the Technical Employment Test (TET) (if applicable), and the Predictive Index (PI) assessment.
Background information – education, academic/professional qualifications, and your CV/résumé.
Immigration status – citizenship status related to any visa sponsorship, now or in the future, if at all.
EEOC data (voluntary) – only if you opt-in: sexual orientation, disability status, veteran status, and/or racial or ethnic origin.

Purpose(s) for Processing Your Data

Throughout the application process, your Data will be processed for recruitment purposes – mainly, to determine your qualifications for employment with InterSystems and to reach a hiring decision. Our recruitment purposes include:

setting up, conducting, and evaluating interviews,
administering employment tests for applicants,
assessing your skills and suitability for a particular role,
verifying your Data,
performing reference or (educational/professional) background checks (where applicable), and
generally managing the hiring process and communicating about it with you.

Such processing is carried out as necessary for the purposes of taking steps, at your request, as a data subject, prior to potentially entering into a contract, consistent with Data Protection Laws, in particular with regard to the solicitation, evaluation, and selection of applicants for employment.

Who We Share Your Data With

We take care to allow access to your Data only to those who require such access to perform their tasks and duties, and to third parties who have a legitimate business purpose or other lawful ground for accessing it. Whenever we permit a third party to access your Data, we implement appropriate measures to ensure your Data is used in a manner consistent with this Notice and that those parties are duly bound by confidentiality obligations or appointed as a Data Processor. Please note that the provision of your Data is not mandatory; however, without your Data we will not be able consider your application for the position.

Your Data will be shared with the relevant local InterSystems affiliate for the location of the position for which you have applied. In addition, your Data will be shared with Greenhouse Software, Inc., a cloud services provider located in the United States of America and engaged by InterSystems to help operate this site on behalf of InterSystems, as the Data Controller, to facilitate and support our recruitment and hiring process.

Europe Only

If you are a job applicant in the United Kingdom, European Economic Area, or Switzerland (collectively, “Europe”), our legal basis for processing your Data described above will rely on the following legal bases:

it is in our legitimate interest (which are not overridden by your rights, particularly taking into consideration the safeguards that we put in place);
we need your Data to perform a contract with you, i.e., to administer an employment or work relationship with us;
to comply with applicable immigration and/or employment laws and regulations;
we have your consent to do so. Where we have requested your consent to process your Data, you have the right to withdraw your consent at any time;
to protect your vital interests or those of another person; and/or
to protect the rights and interests of InterSystems, our employees, applicants, and others, as required and permitted by applicable law.

For further information on how we handle your Data, please see the Recipients, Transfer, Disclosure of Information [Your Data] section of the InterSystems Privacy Statement.

Transfer of Your Data Abroad [Non-USA Residents]

This section applies to all individuals located outside of the United States of America. Given that we operate at a global level, we may need to transfer your Data to countries other than the ones in which your Data was originally collected. If you are located outside of the United States, your Data will be transferred to the USA once you submit it through this site. When we transfer your Data to a different country, we take steps to ensure that your Data transfer complies with applicable Data Protection Laws. For example, when transferring Personal Data from Europe to a country outside of it, such as the United States, we have implemented safeguards by means of the European Commission’s Standard Contractual Clauses (SCCs) located at www.intersystems.com/ISCEUSCC or www.intersystems.com/ISCEUSCCP. Similarly, for job applicants from the United Kingdom, we have implemented the UK Information Commissioner’s Office International Data Transfer Agreement (IDTA) located at www.InterSystems.com/ISCUKIDTA.

Data Retention Periods

Your Data will be retained by InterSystems for only as long as it is necessary to evaluate your application for employment and our business operations; but in any case, no more than 1825 days, unless you provide consent by means of a Consent Extension Email (to be sent nearing the end of your applicable retention period).

Your Data Privacy Rights

For more information about your rights and how to exercise them under applicable Data Protection Laws, please see the InterSystems Privacy Statement as well as our Exercise Your Privacy Rights page. The rights found in the Privacy Statement can be exercised freely, at any time and without hindrance, by contacting the InterSystems Data Protection Officer at DPO@InterSystems.com.

More information about InterSystems’ Global Trust program and the data protection, privacy, and security protections and safeguards is available at www.InterSystems.com/GlobalTrust.

If you have any comments or questions about this Notice, you may contact us at any time at GlobalTrust@InterSystems.com.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in InterSystems’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Gender

Are you Hispanic/Latino?

Please identify your race

Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Veteran Status

Voluntary Self-Identification of Disability

Form CC-305

Page 1 of 1

OMB Control Number 1250-0005

Expires 04/30/2026

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

Alcohol or other substance use disorder (not currently using drugs illegally)
Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
Blind or low vision
Cancer (past or present)
Cardiovascular or heart disease
Celiac disease
Cerebral palsy
Deaf or serious difficulty hearing
Diabetes
Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
Epilepsy or other seizure disorder
Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
Intellectual or developmental disability
Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
Missing limbs or partially missing limbs
Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
Partial or complete paralysis (any cause)
Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
Short stature (dwarfism)
Traumatic brain injury

Disability Status

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.

Enter the verification code sent to to confirm you are not a robot, then submit your application.

Security Code *

This application was flagged as potential bot traffic. To resubmit your application, turn off any VPNs, clear the browser's cache and cookies, or try another browser. If you still can't submit it, contact our support team through the help center.

School *

Degree *

Discipline *