HITRUST CSF Auditor / Assessor – Contract

Location: India (Remote)

Engagement Type: Independent Contractor / Project-Based

Working Hours: Flexible, with availability for overlapping US business hours when required

Experience: 3–7+ years in Information Security, IT Audit, GRC, Cybersecurity Compliance or Risk Management

About Privaxi

Privaxi is a cybersecurity, compliance and technology company helping organizations strengthen their security posture, manage compliance requirements and achieve industry-recognized security certifications. We work with organizations, particularly in the US market, to support their cybersecurity, risk management and compliance initiatives.

Role Overview

Privaxi is looking for an experienced HITRUST CSF Auditor / Assessor to work with us on a contract basis. The selected skilled will support HITRUST CSF assessment engagements, including evaluating security controls, reviewing documentation and evidence, conducting stakeholder interviews, identifying compliance gaps and preparing assessment reports.

The ideal candidate should have practical experience with HITRUST CSF assessments, preferably across e1, i1 and r2 assessment types, and a strong understanding of information security frameworks and regulatory compliance.

Key Responsibilities

1. HITRUST Assessment & Auditing

- Conduct HITRUST CSF control assessments and testing.
- Evaluate organizational security policies, procedures and technical controls.
- Review control implementation against applicable HITRUST CSF requirements.
- Assess the effectiveness and maturity of implemented security controls.
- Identify control gaps, risks and areas of non-compliance.

2. Documentation & Evidence Review

- Review security policies, SOPs,



procedures and supporting documentation.
- Collect, validate and assess evidence submitted by clients.
- Maintain detailed audit workpapers and assessment documentation.
- Document findings, observations and control deficiencies.
- Ensure assessment documentation is complete and traceable.

3. Client Coordination

- Conduct interviews and discussions with IT, Security, Compliance and Management teams.
- Coordinate evidence collection and clarification with client stakeholders.
- Communicate findings and explain control requirements.
- Support clients in understanding identified compliance gaps.

4. Reporting & Remediation

- Prepare assessment findings and gap assessment reports.
- Recommend corrective actions and remediation measures.
- Track remediation progress and validate supporting evidence.
- Assist in preparing assessment deliverables for review by the engagement lead.

5. Framework Knowledge Working knowledge of the following frameworks and standards is preferred:

- HITRUST CSF
- ISO/IEC 27001
- SOC 2 Trust Services Criteria
- NIST Cybersecurity Framework
- NIST SP 800-53
- HIPAA Security Rule
- GDPR and other relevant data protection requirements

Required Qualifications

- 3–7+ years of experience in IT Auditing, Information Security, Cybersecurity, GRC or Compliance.
- Demonstrable hands-on experience with HITRUST CSF assessments.




- Understanding of HITRUST assessment methodologies, control requirements and evidence validation.
- Experience conducting security control testing and documenting audit findings.
- Strong knowledge of information security and risk management principles.
- Excellent written and verbal communication skills.
- Ability to independently manage assigned assessment workstreams.

Certifications (Strongly Preferred)

- Certified HITRUST CSF Practitioner (CCSFP)
- Certified Information Systems Auditor (CISA)
- Certified Information Systems Security Professional (CISSP)
- Certified Information Security Manager (CISM)
- ISO 27001 Lead Auditor / Lead Implementer

CCSFP certification is highly preferred. Candidates must disclose their current HITRUST certification status and any relevant assessor organization affiliation.

Engagement Structure

- Contract-based engagement with Privaxi.
- Work assigned on a project or assessment basis.
- Remote working arrangement from India.
- Compensation to be discussed based on experience, certification and project requirements.
- Potential for recurring engagements based on performance and project pipeline.

Application Requirements

Interested candidates should share

1. Updated resume.
2. HITRUST certifications and credentials, including CCSFP status.
3. Details of previous HITRUST assessment engagements.
4. Assessment types worked on (e1, i1, r2).
5. Number of HITRUST assessments completed.
6. Experience working with US-based clients.
7. Expected hourly rate or project-based commercial expectations.
8. Availability and notice period.

To Apply: Share your profile and relevant experience for consideration by the Privaxi team.

📌 HITRUST CSF Auditor (India)
🏢 Privaxi
📍 India