Skip to content

Open nowPosted 57 days ago

Senior Cybersecurity & Compliance Specialist

Amplifon46 open roles

Pay
$120,000 – $140,000 a year
Where
MINNEAPOLIS, MN, United States
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Cybersecurity & Compliance SpecialistAmplifon · MINNEAPOLIS, MN, United States
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Amplifon's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

9.0% of postings close within 7 days. Measured by our own scanner across the market. Amplifon postings stay open a median of 6 days.

Share of postings closed within
  1. 1.8%1 day
  2. 3.9%3 days
  3. 9.0%7 days
  4. 15.5%14 days
  5. 34.1%30 days
This job: posted 57 days ago

Amplifon median: 6 days open

The posting

Job Description

Amp Up Your Career

We are seeking a Senior Cybersecurity & Compliance Specialist who is ready to join an organization that combines passion and performance to shape a better world. As a Global Top Employer 2026, Amplifon is a place where your expertise improves lives and accelerates your career.

In this role, you will support the implementation, monitoring, and enforcement of cybersecurity measures and regulatory compliance across the organization, ensuring IT systems and processes align with internal policies, data protection laws, and industry standards like HITRUST r2 and SOC2 Type II. Key responsibilities include conducting risk assessments, supporting audits, managing security controls, incident response coordination, and promoting awareness to foster a culture of security and compliance throughout the organization.

Compensation: Based on qualifications we anticipate the hiring range will be $120,000-$140,000.

Hybrid Work: We require team members to be in our downtown Minneapolis office three days per week, offering flexibility while fostering in-person collaboration.

Benefits Offered:

  • Health & Financial: Medical, Dental, Vision, 401(k) with company match, family hearing aid benefits, and tuition reimbursement.
  • Work-life Balance: Generous vacation, safe and sick leave, paid holidays, paid volunteer time off, parental leave and bereavement.
  • Well-being: Access to our Wellness Hub and Employee Assistance Program (EAP), providing holistic support for you and your family.
  • Career Development: Access to Ampli-Academy, LinkedIn Learning, Coursera, team training, and additional specialized training.
  • Commuter Support: Reimbursement for transportation (parking downtown, bus or train).

Key Responsibilities:

Cybersecurity & Risk Management

  • Implement and monitor cybersecurity controls to protect organizational systems and data.
  • Assist with risk assessments and security reviews to identify vulnerabilities and coordinate mitigation actions.
  • Develop and maintain the organization's cybersecurity posture in alignment with HITRUST r2 and SOC2 Type II frameworks.
  • Support threat detection, incident response, and timely reporting per regulatory timelines.
  • Monitor threat intelligence feeds and assist in evaluating emerging cyber threats.

Compliance & Regulatory Management

  • Ensure compliance with internal security policies and regulatory frameworks (e.g. HITRUST, SOC2, HIPAA, ISO 27001, CIS Controls and NIST CSF).
  • Maintain HITRUST and HIPPA controls including supply chain security, vulnerability management, and business continuity planning.
  • Support internal and external audits by gathering evidence, providing documentation, and tracking remediation efforts.
  • Manage the lifecycle of compliance documentation and maintain accurate, up-to-date records of security controls and procedures.
  • Monitor regulatory changes and apply new compliance obligations.

Governance & Stakeholder Collaboration

  • Partner with IT, business stakeholders, and vendors to embed security and compliance requirements into processes, projects and procurement activities.
  • Conduct vendor risk assessments and third-party evaluations to satisfy HITRUST & SOC2 supply chain compliance.
  • Participate in governance committees and security steering groups to provide compliance insights and recommendations.
  • Support security training and awareness initiatives to foster a culture of compliance and accountability.

Required Qualifications:

  • 5+ years of professional experience in cybersecurity, IT compliance, IT risk management, or IT audit roles.
  • Solid knowledge of cybersecurity frameworks and standards (e.g., HITRUST CSF, ISO 27001, NIST CSF, CIS Controls) and relevant healthcare regulations (e.g., HIPAA).
  • Familiarity with risk assessment methodologies, security monitoring tools, audit processes, vulnerability management, and incident response procedures.
  • Knowledge of supply chain security and third-party risk management practices.
  • Strong organizational and documentation skills, an analytical mindset, and exceptional attention to detail.
  • Good communication and interpersonal skills to work effectively with cross functional teams and external auditors.
  • Ability to work independently and manage multiple priorities in a dynamic environment.

Preferred Qualifications:

  • Relevant professional certifications such as Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or HITRUST CSFP.
  • Direct experience with compliance management platforms and GRC (Governance, Risk & Compliance) tools.
  • Demonstrated ability to lead technology risk changes across a large organization.
  • Knowledge of healthcare industry regulations and data protection requirements.

Amplifon is the global leader in the hearing care retail market, empowering people to rediscover all the emotions of sound. With a presence in 25 countries and 20,300 employees worldwide, we are a team of diverse, innovative talent dedicated to improving lives through customer experience.

Amplifon Americas, headquartered in Minneapolis, MN, supports Amplifon Canada, Amplifon Hearing Health Care, GAES, and Miracle-Ear bridging retail and insurance industries to provide comprehensive hearing well-being across Canada, LATAM, and the United States.

Please note that AI tools may be used to assist in resume screening. All hiring decisions are made by our recruitment team.

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. If selected for an interview, please advise our Human Resources team if you require accommodation during the interview and assessment process and we will work with you to meet your accessibility needs.

Candidates must be authorized to work in the United States on a full-time basis without the need for current or future visa sponsorship. This role is not eligible for visa sponsorship, including but not limited to OPT, STEM OPT, CPT, or H-1B. We are unable to sponsor or take over sponsorship of an employment visa at this time.

#IND1

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Amplifon's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Amplifon's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Amplifon's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.