Join MTC Group's advisor team

Independent, credentialed information security professionals who assess, coach or lead the HIPAA, SOC 2 and ISO 27001 programs of healthcare organizations on HealthData DueCare.

RSP Assessor

Independently assesses a healthcare organization's filed HIPAA program, check by check, holds a one-hour interview with its management, records findings and signs the RSP Assessment Report the organization shares with its own customers. Read-only access to the organizations assigned to you.

Requires: CISA, or CISSP, CISM or CCISO with audit experience: CIA, ISO 27001 Lead Auditor (certified), or audits you performed, which MTC Group confirms with your references.

InfoSec Advisor

Coaches an organization's own team through building its HIPAA, SOC 2 or ISO 27001 program on the platform. You guide and review; the team does the work. You are not the organization's designated security professional. Read-only access to the organizations that choose you.

Requires: CISSP, CISM, CCISO, CISA, CCSP, or ISO 27001 Lead Implementer (certified).

fCISO

The executive leader for organizations that want their InfoSec program built and run for them: you lead the HIPAA, SOC 2 or ISO 27001 program, represent the organization on security at an executive level, and work directly in its account.

Requires: CISSP, CISM or CCISO.

A CPA firm, ISO 27001 certification body or penetration testing firm? Apply to be listed (free).

What every role requires

  • The credential the role requires, shown above, which MTC Group verifies with the issuing body using the certificate number you give.
  • Working under a written agreement with MTC Group, including confidentiality and a business associate agreement: as an independent 1099 contractor, or through an employer of record for residents of California, Massachusetts, New Jersey and Illinois.
  • Professional liability insurance (and cyber liability insurance for an fCISO), and monthly screening against the federal and state exclusion lists.
  • Independence: whoever builds or coaches an organization's program never assesses it, then or within the following twenty-four months.

Your application

Add each credential the roles above accept, with the number the issuer shows, so MTC Group can verify it.

CredentialIssuerCertificate numberExpires
—

People MTC Group may contact about your work: a supervisor, client, audit lead or colleague. Not yourself.

NameRelationshipEmailPhone

0/1000

Still needed before you can send:

  • Choose at least one role.
  • Enter your full name.
  • Enter your email address.
  • Choose the state you live in.
  • Credential 1: Choose the credential.
  • Reference 1: name, relationship and email are required.
  • Reference 2: name, relationship and email are required.
  • Enter the hours a month you can give (1 to 200).
  • Choose your time zone.
  • Choose the earliest date you could start.
  • Confirm the declaration at the end.
Your cookie choices
We use essential cookies to run this site, and, only with your consent, advertising cookies from Google, LinkedIn, and Reddit to measure ad performance. See our for details.